Vulnerability Bulletins |
IBM Security Bulletin: IBM PowerVC is Impacted by OpenStack Neutron Policy Admin-Only Rules Security Bypass (CVE-2014-6414) |
|
| Affected software | IBM |
|
PowerVC is impacted by an OpenStack neutron vulnerability whereby a non-privileged user may reset admin-only network attributes. CVE(s): CVE-2014-6414 Affected product(s) and affected version(s): PowerVC Express Edition 1.2.0.0 through 1.2.0.3 PowerVC Express Edition 1.2.1.0 through 1.2.1.2 PowerVC Standard Edition 1.2.0.0 through 1.2.0.3 PowerVC Standard Edition 1.2.1.0 through 1.2.1.2 Refer to the following reference URLs for remediation and additional vulnerability details: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_powervc_is_impacted_by_openstack_neutron_policy_admin_only_rules_security_bypass_cve_2014_6414?lang=en_us |
|