CVE-2015-5240 is a vulnerability in OpenStack Neutron
Published on October 27, 2015
Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start with network: before the security group rules are applied.
Products Associated with CVE-2015-5240
Want to know whenever a new CVE is published for OpenStack Neutron? stack.watch will email you.
Exploit Probability
EPSS
0.09%
Percentile
26.28%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.