Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3703

Опубликовано: 02 дек. 2014
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:packstack:2012.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.02164
Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

redhat
почти 12 лет назад

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

github
около 4 лет назад

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

EPSS

Процентиль: 81%
0.02164
Низкий

5 Medium

CVSS2

Дефекты

CWE-264