Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2014-0056 | First vendor Publication | 2014-05-08 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:S/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 3.9 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0056 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-287 | Improper Authentication |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:24699 | |||
| Oval ID: | oval:org.mitre.oval:def:24699 | ||
| Title: | USN-2194-1 -- neutron vulnerability | ||
| Description: | OpenStack Neutron would allow unintended access to other tenant networks. | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-2194-1 CVE-2014-0056 | Version: | 5 |
| Platform(s): | Ubuntu 13.10 | Product(s): | neutron |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-05-06 | Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2194-1.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 12:38:20 |
|
| 2023-02-13 05:28:21 |
|
| 2023-02-02 21:28:33 |
|
| 2021-05-04 12:29:20 |
|
| 2021-04-22 01:35:36 |
|
| 2020-05-23 00:39:17 |
|
| 2014-06-05 09:20:45 |
|
| 2014-05-09 21:24:58 |
|
