There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy
    enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant
    is able to change (add and clear) tags on network objects that do not belong to the tenant, and this
    action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before
    24.0.2, and 25 before 25.0.1. (CVE-2024-53916)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 25.0.1之前的 OpenStack Neutron 中，neutron/extensions/tagging.py 可在原則強制執行期間使用不正確的 ID。它不會針對變更的網路標籤套用適當的原則檢查。無權限的租用戶可變更 (新增並清除) 網路物件上不屬於該租用戶的標籤，且此動作不會受到適當的原則授權檢查。這會影響 23.2.1之前的 23、 24.0.2之前的 24 和 25.0.1之前的 25。 (CVE-2024-53916)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 25.0.1之前的 OpenStack Neutron 中，neutron/extensions/tagging.py 可在策略执行期间使用错误的 ID。它没有对更改的网络标记应用正确的策略检查。非特权租户可变更（添加和清除）网络对象上不属于该租户的标签，而且此操作没有经过适当的策略授权检查。这会影响 23.2.1之前的 23、 24.0.2之前的 24 和 25.0.1之前的 25。 (CVE-2024-53916)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 25.0.1より前の OpenStack Neutron では、neutron/extensions/tagging.py がポリシーの実施中に不適切な ID を使用する可能性があります。ネットワークタグの変更に対して適切なポリシーチェックを適用しません。権限のないテナントは、テナントに属していないネットワークオブジェクトのタグを変更（追加および消去）することができ、このアクションは適切なポリシー承認チェックの対象になりません。これは、 23.2.1の前に 23、 24.0.2の前の 24、 25.0.1の前の 25 に影響します。 （CVE-2024-53916）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1052 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-53916:
    In OpenStack Neutron through 25.0.0, neutron/extensions/tagging.py can use an incorrect ID during policy     enforcement. NOTE: 935883 has the Work in Progress status as of 2024-11-24.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In OpenStack Neutron before 25.0.1, neutron/extensions/tagging.py can use an incorrect ID during policy     enforcement. It does not apply the proper policy check for changing network tags. An unprivileged tenant     is able to change (add and clear) tags on network objects that do not belong to the tenant, and this     action is not subjected to the proper policy authorization check. This affects 23 before 23.2.1, 24 before     24.0.2, and 25 before 25.0.1. (CVE-2024-53916)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
421295	SCA: security update for neutron (GHSA-f27h-g923-68hw)	Tenable Cloud Security	SCA Checks	3/28/2025	7/2/2026	medium
421295	SCA: security update for neutron (GHSA-f27h-g923-68hw)	Tenable Self-Hosted Container Security	SCA Checks	3/28/2025	7/2/2026	medium
231159	Linux Distros 未修補弱點：CVE-2024-53916	Nessus	Misc.	3/6/2025	7/18/2026	high
231159	Linux Distros 未修补的漏洞: CVE-2024-53916	Nessus	Misc.	3/6/2025	7/18/2026	high
231159	Linux Distros のパッチ未適用の脆弱性: CVE-2024-53916	Nessus	Misc.	3/6/2025	7/18/2026	high
238725	TencentOS Server 4: openstack-neutron (TSSA-2024:1052)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	medium
231159	Linux Distros Unpatched Vulnerability : CVE-2024-53916	Nessus	Misc.	3/6/2025	7/18/2026	high

Detections

Analytics

Plugins Search

medium

medium

high

high

high

medium

high