Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2014-0056

The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:N/AC:H/Au:S/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
openstack / neutron 2013.2.2 2013.2.2.x
openstack / neutron 2012.2.4 2012.2.4.x
openstack / neutron 2013.1.1 2013.1.1.x
openstack / neutron 2012.2.2 2012.2.2.x
openstack / neutron 2013.1.3 2013.1.3.x
openstack / neutron 2012.2.1 2012.2.1.x
openstack / neutron 2013.2 2013.2.x
openstack / neutron 2013.1.4 2013.1.4.x
openstack / neutron 2013.1.5 2013.1.5.x
openstack / neutron 2013.1 2013.1.x
openstack / neutron 2012.2.3 2012.2.3.x
openstack / neutron 2013.1.2 2013.1.2.x
openstack / neutron 2012.2 2012.2.x
openstack / neutron 2013.2.1 2013.2.1.x
canonical / ubuntu_linux 13.10 13.10.x
neutron 2012.2 2013.2.3