CVE-2014-3703

Name of the Vulnerable Software and Affected Versions OpenStack PackStack version 2012.2.1

Description The issue arises when the Open vSwitch (OVS) monolithic plug-in is not used, leading to improper setting of the libvirt vif driver configuration option in the nova.conf configuration. This results in the firewall being disabled, allowing remote attackers to bypass intended access restrictions.

Recommendations For OpenStack PackStack version 2012.2.1, ensure the libvirt vif driver configuration option is properly set in the nova.conf configuration to enable the firewall and prevent access restriction bypass.