Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Neutron 授权问题漏洞
Vulnerability Description
OpenStack是美国美国国家航空航天局（NASA）的一个云平台管理项目。Neutron是其中的一个提供了网络即服务（NaaS）的网络组件，它能够在OpenStack服务之间创建网络、向网格中接入网络设备等。 OpenStack Neutron 2013.2.3之前的2012.2版本存在授权问题漏洞，该漏洞源于当创建端口时，程序没有正确检查用户的ID。远程攻击者可通过port-create命令中的设备ID利用该漏洞访问其他用户的网络。
CVSS Information
N/A
Vulnerability Type
N/A