VULNERABILITY INTELLIGENCE

CVE-2014-3632

CVSS score7.6 HIGH
EPSS probability2.50%
CISA KEVNot currently listed
Published2014-10-07
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.

Primary references