CVE-2014-0592 Security feature bypass in n/a
Remote attackers can bypass security group restrictions in SUSE Cloud by exploiting missing netfilter configuration on bridges during instance creation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-0592?
CVE-2014-0592 is a high-severity vulnerability in n/a, published on 4 Apr 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs.
Weakness: CWE-264
Which versions are affected by CVE-2014-0592?
It affects 2 products.
Products include Crowbar Barclamp, Novell Suse Cloud.
How do I fix CVE-2014-0592?
No fix has been published for CVE-2014-0592 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-0592 being exploited?
There is no known exploitation of CVE-2014-0592 in the wild and no public exploit code.
Sources
Also known as GHSA-mq43-r7qr-fpq5.