VULNERABILITY INTELLIGENCE

CVE-2014-3703

CVSS score5 MEDIUM
EPSS probability2.16%
CISA KEVNot currently listed
Published2014-12-02
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.

Primary references