PT-2014-3464 · Red Hat+1 · Packstack+2

Published 2014-04-17 · Updated 2014-04-17 · CVE-2014-0071

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat OpenStack version 4.0

Description The issue allows remote attackers to bypass intended access restrictions and make unauthorized connections due to the lack of enforcement of default security groups when PackStack is deployed to Neutron.

Recommendations For Red Hat OpenStack version 4.0, ensure that default security groups are manually enforced when deploying PackStack to Neutron to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0071

RHSA-2014:0233

Affected Products

Neutron

Packstack

Red Hat Openstack

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2014-0071 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-0071 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-0071 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-0071 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-0233.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0071 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0071 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-0071 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1064163 · Note
• http://securityfocus.com/bid/66001 · Note