CVEvulnerability

CVE-2014-0056

2.1 LOW Published 2014-05-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:N/AC:H/Au:S/C:P/I:N/A:N
Weaknesses
CWE-287

Description

The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.

Affected configurations

• openstack neutron 2012.2 • openstack neutron 2012.2.1 • openstack neutron 2012.2.2 • openstack neutron 2012.2.3 • openstack neutron 2012.2.4 • openstack neutron 2013.1 • openstack neutron 2013.1.1 • openstack neutron 2013.1.2 • openstack neutron 2013.1.3 • openstack neutron 2013.1.4 • openstack neutron 2013.1.5 • openstack neutron 2013.2 • openstack neutron 2013.2.1 • openstack neutron 2013.2.2 • canonical ubuntu linux 13.10

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References