CVE-2013-6433

Openstack Neutron < 2013.2.3 - Access Control

Title source: rule

Description

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

Scores

EPSS 0.0161
EPSS Percentile 81.5%

Classification

CWE
CWE-264
Status draft

Affected Products (3)

openstack/neutron < 2013.2.3
canonical/ubuntu_linux
canonical/ubuntu_linux

Timeline

Published Jun 02, 2014
Tracked Since Feb 18, 2026