Solution
Please Install the Updated Packages.
Insight
Aaron Rosen discovered that OpenStack Neutron did not properly perform authorization checks when creating ports when using plugins relying on the l3-agent. A remote authenticated attacker could exploit this to access the network of other tenants.
Affected
neutron on Ubuntu 13.10
Severity
Classification
-
CVE CVE-2014-0056 -
CVSS Base Score: 2.1
AV:N/AC:H/Au:S/C:P/I:N/A:N
Related Vulnerabilities