What is CVE-2024-53916?

CVE-2024-53916 is a high-severity vulnerability in N/a, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2024-11-25.

How severe is CVE-2024-53916?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in N/a

CVE-2024-53916

In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant is able to change (add and clear) tags on network objects that do not belong to the tenant, and this action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before 24.0.2, and 25 before 25.0.1.

EPSS: 0.007 (49.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

Frequently asked questions

What is CVE-2024-53916?: CVE-2024-53916 is a high-severity vulnerability in N/a, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.5/10. Published 2024-11-25.
How severe is CVE-2024-53916?: High severity. CVSS v3 base score is 7.5 out of 10.