CVE-2014-6414

Опубликовано: 02 окт. 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

Ссылки

http://rhn.redhat.com/errata/RHSA-2014-1686.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1785.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1786.html
Third Party Advisory
http://secunia.com/advisories/62299
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/09/15/5
Mailing List
Third Party Advisory
http://www.ubuntu.com/usn/USN-2408-1
Third Party Advisory
https://bugs.launchpad.net/neutron/+bug/1357379
Patch
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1686.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1785.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-1786.html
Third Party Advisory
http://secunia.com/advisories/62299
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/09/15/5
Mailing List
Third Party Advisory
http://www.ubuntu.com/usn/USN-2408-1
Third Party Advisory
https://bugs.launchpad.net/neutron/+bug/1357379
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*

Версия от 2013.2 (включая) до 2013.2.4 (включая)

cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*

Версия от 2014.1 (включая) до 2014.1.2 (исключая)

cpe:2.3:a:openstack:neutron:*:*:*:*:*:*:*:*

Версия от 2014.2 (включая) до 2014.2.4 (включая)

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 82%

0.02089

Низкий

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-6414

ubuntu

около 12 лет назад

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

CVE-2014-6414

redhat

около 12 лет назад

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

CVE-2014-6414

debian

около 12 лет назад

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows re ...

GHSA-94x8-hxww-p5g2

github

больше 4 лет назад

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

ALT-PU-2014-3223

altlinux

около 12 лет назад

ALT-PU-2014-3223: package `openstack-neutron` update to version 2014.1.2-alt1

EPSS

Процентиль: 82%

0.02089

Низкий

4 Medium

CVSS2

Дефекты

CWE-264