OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
https://bugs.launchpad.net/neutron/+bug/1357379 | third party advisory patch |
http://www.openwall.com/lists/oss-security/2014/09/15/5 | third party advisory mailing list |
http://rhn.redhat.com/errata/RHSA-2014-1686.html | third party advisory vendor advisory |
http://rhn.redhat.com/errata/RHSA-2014-1786.html | third party advisory vendor advisory |
http://rhn.redhat.com/errata/RHSA-2014-1785.html | third party advisory vendor advisory |
http://www.ubuntu.com/usn/USN-2408-1 | third party advisory vendor advisory |
http://secunia.com/advisories/62299 | third party advisory |