OpenStack Neutron Improper Authentication vulnerability

published 2014-05-08 12 y ago modified 2026-07-07 4 mo ago also GHSA-72p9-6gc7-q93r , PYSEC-2026-851 , EUVD-2022-2893

cvss: 2.1; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.4%; EPSS 1.4% chance of exploitation in 30 days, percentile 73%
public exploits: 0; none known

The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command.

Patch / fix

fixed in 1 distros 2

pypi neutron 2013.2.3

debian red hat

neutron Debian 14, Debian 13, Debian 12 2013.2.2-4

debian advisories DEBIAN-CVE-2014-0056

openstack-neutron openstack 4 2013.2.3-7.el6ost
python-neutron openstack 4 2013.2.3-7.el6ost
openstack-neutron-ml2 openstack 4 2013.2.3-7.el6ost
openstack-neutron-nec openstack 4 2013.2.3-7.el6ost
openstack-neutron-ryu openstack 4 2013.2.3-7.el6ost
openstack-neutron-cisco openstack 4 2013.2.3-7.el6ost
openstack-neutron-hyperv openstack 4 2013.2.3-7.el6ost
openstack-neutron-nicira openstack 4 2013.2.3-7.el6ost

red hat advisories RHSA-2014:0516

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2014-0056 updated 2026-07-31 cvss 4.1

openstack-neutron: insufficient authorization checks when creating ports

Red Hat OpenStack Platform 3 openstack-quantum
affected: no fix planned “Will not fix”
Red Hat Enterprise Linux OpenStack Platform 4.0 python-neutron 2013.2.3-7.el6ost, openstack-neutron 2013.2.3-7.el6ost, openstack-neutron-ml2 2013.2.3-7.el6ost, openstack-neutron-nec 2013.2.3-7.el6ost, openstack-neutron-ryu 2013.2.3-7.el6ost, openstack-neutron-cisco 2013.2.3-7.el6ost, +12 more
fixed: vendor fix RHSA-2014:0516
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) openstack-neutron
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.44% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	2.1	AV:N/AC:H/Au:S/C:P/I:N/A:N

Affected packages

ecosystem	package	affected	fixed in
pypi	neutron	>=2012.2, <2013.2.3	2013.2.3

Classification

Weakness

CWE-287 Improper Authentication

References

rhn.redhat.com /errata/RHSA-2014-0516.html
vendor-advisory, web
ubuntu.com /usn/USN-2194-1
vendor-advisory, web
openwall.com /lists/oss-security/2014/03/27/5
mailing-list, web
bugs.launchpad.net /neutron/+bug/1243327
web
nvd.nist.gov /vuln/detail/CVE-2014-0056
advisory
access.redhat.com /errata/RHSA-2014:0516
web
access.redhat.com /security/cve/CVE-2014-0056
web
bugzilla.redhat.com /show_bug.cgi?id=1063141
web
opendev.org /openstack/neutron
package
pypi.org /project/neutron
package
github.com /advisories/GHSA-72p9-6gc7-q93r
advisory

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary