A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant.
An attacker can leverage a token associated with a removed user role to gain unauthorized access.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 2
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Openstack Essex
cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*
|
— | — |
|
Openstack Folsom
cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*
|
— | — |
References 15
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.…
secalert@redhat.com
http://rhn.redhat.com/errata/RHSA-2012-1556.html
secalert@redhat.com
http://rhn.redhat.com/errata/RHSA-2012-1557.html
secalert@redhat.com
http://secunia.com/advisories/51423
secalert@redhat.com
http://secunia.com/advisories/51436
secalert@redhat.com
http://www.openwall.com/lists/oss-security/2012/11/28/5
secalert@redhat.com
http://www.openwall.com/lists/oss-security/2012/11/28/6
secalert@redhat.com
http://www.securityfocus.com/bid/56726
secalert@redhat.com
http://www.ubuntu.com/usn/USN-1641-1
secalert@redhat.com
https://access.redhat.com/security/cve/CVE-2012-5571
secalert@redhat.com
https://bugs.launchpad.net/keystone/+bug/1064914
secalert@redhat.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/80333
secalert@redhat.com
https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d18…
secalert@redhat.com
https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acf…
secalert@redhat.com
https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586…
secalert@redhat.com