First published: Fri Apr 04 2014(Updated: )
Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Crowbar Barclamp | =1.7 | |
Novell Suse Cloud | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.