CVE-2014-6414

MEDIUM 4.0CVE-2014-6414 · Published 02/10/2014 · updated 17/06/2026

In short

CVE-2014-6414 is a MEDIUM (CVSS 4.0) vulnerability affecting neutron (openstack).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.6% of all vulnerabilities.
Fix: update to 2014.1.2 or later.

Package	Affected versions	Patched versions
neutron openstack	`≥ 2013.2, ≤ 2013.2.4≥ 2014.1, < 2014.1.2≥ 2014.2, ≤ 2014.2.4`	`2014.1.2`

Description

OpenStack Neutron before 2014.2.4 and 2014.1 before 2014.1.2 allows remote authenticated users to set admin network attributes to default values via unspecified vectors.

References

rhn.redhat.com/errata/RHSA-2014-1686.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-1785.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-1786.html · Third Party Advisory
secunia.com/advisories/62299 · Third Party Advisory
openwall.com/lists/oss-security/2014/09/15/5 · Mailing List
ubuntu.com/usn/USN-2408-1 · Third Party Advisory
bugs.launchpad.net/neutron/+bug/1357379 · Patch

More vulnerabilities in neutron

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

neutron

openstack

≥ 2013.2, ≤ 2013.2.4≥ 2014.1, < 2014.1.2≥ 2014.2, ≤ 2014.2.4

2014.1.2

More vulnerabilities in neutron

See all →