What’s Vulnerable › Vulnerabilities
CVE-2014-3632
- Severity: high (CVSS 7.6 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2014-10-07 · updated 2026-06-17
- Weakness: CWE-264
Description
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Affected products
- OpenStack Neutron: from 2014.1 through 2014.1.2
References
Get alerted when CVE-2014-3632 or the next vulnerability affects your stack