CVE Intelligence

Vulnerabilidades do Red Hat OpenStack Essex for RHEL 6

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Red Hat OpenStack Essex for RHEL 6: 1 registro(s), com versões afetadas e correções.

CVE-2012-5571 Média · 5.4 CWE-639 17/12/2012
Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling
A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.