CVE-2014-6414 OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.
MediumCVSS 4.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/neutron(Debian:12) | < 2014.1.3-1 | 2014.1.3-1 |
| debian/neutron(Debian:13) | < 2014.1.3-1 | 2014.1.3-1 |
| debian/neutron(Debian:14) | < 2014.1.3-1 | 2014.1.3-1 |
| OpenStack Neutron | >= 2013.2, <= 2013.2.4 | No fix listed |
| OpenStack Neutron | >= 2014.1, < 2014.1.2 | 2014.1.2 |
| OpenStack Neutron | >= 2014.2, <= 2014.2.4 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
References
- Debian Security Tracker CVE-2014-6414 vendor-advisory
- RHSA-2014:1686 third-party-advisory vendor-advisory
- RHSA-2014:1785 third-party-advisory vendor-advisory
- RHSA-2014:1786 third-party-advisory vendor-advisory
- 62299 third-party-advisory
- [oss-security] 20140916 CVE request for vulnerability in OpenStack Neutron mailing-list third-party-advisory
- USN-2408-1 third-party-advisory vendor-advisory
- bugs.launchpad.net patch third-party-advisory