CVE Vulnerabilities

CVE-2014-3632

Published: Oct 07, 2014 | Modified: Nov 07, 2023

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

7.6 HIGH

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-3632
CWE	https://cwe.mitre.org/data/definitions/264.html

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.

Affected Software

Name	Vendor	Start Version	End Version
Neutron	Openstack	2014.1	2014.1.2

References

http://rhn.redhat.com/errata/RHSA-2014-1339.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.