Vulnerabilities > Openstack > Neutron > High

DATE CVE VULNERABILITY TITLE RISK
2021-05-28 CVE-2021-20267 Insufficient Verification of Data Authenticity vulnerability in multiple products
A flaw was found in openstack-neutron's default Open vSwitch firewall rules.
network
low complexity
openstack redhat CWE-345
7.1
2014-06-02 CVE-2013-6433 Permissions, Privileges, and Access Controls vulnerability in multiple products
The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.
network
high complexity
openstack canonical CWE-264
7.6