CVE-2024-53916

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53916
In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232
https://review.opendev.org/c/openstack/neutron/+/935883
https://review.opendev.org/q/project:openstack/neutron
https://security.openstack.org/ossa/OSSA-2024-005.html
http://www.openwall.com/lists/oss-security/2024/12/03/1
Configurations

No configuration.

History

06 Jan 2025, 18:15

Type Values Removed Values Added
CWE CWE-754

04 Dec 2024, 22:15

Type Values Removed Values Added
References
  • () https://security.openstack.org/ossa/OSSA-2024-005.html -
  • () http://www.openwall.com/lists/oss-security/2024/12/03/1 -
Summary (en) In OpenStack Neutron through 25.0.0, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. NOTE: 935883 has the "Work in Progress" status as of 2024-11-24. (en) In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1.

27 Nov 2024, 17:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

25 Nov 2024, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-25 00:15

Updated : 2025-01-06 18:15

NVD link : CVE-2024-53916

Mitre link : CVE-2024-53916

CVE.ORG link : CVE-2024-53916

JSON object : View

Products Affected

No product.

CWE
CWE-754

Improper Check for Unusual or Exceptional Conditions