CVE-2014-0056Not ratedEPSS 1.44%Fix availableCVE-2014-0056The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.neutronPythonUpdate to 2013.2.3Published May 8, 2014Updated August 6, 2024Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗