PT-2014-5430 · Openstack · Openstack Neutron

Published 2014-10-07 · Updated 2023-02-13 · CVE-2014-3632

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions openstack-neutron versions prior to 2014.1.2-4

Description The default configuration in the sudoers file allows remote attackers to gain privileges via a crafted configuration file. This issue exists due to a regression.

Recommendations For versions prior to 2014.1.2-4, update to version 2014.1.2-4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-3632

RHSA-2014:1339

Affected Products

Openstack Neutron

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-3632 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-1339.html · Vendor Advisory