Red Hat Security Advisory

RHSA-2014:0113

openstack-keystone security update

Released 2014-01-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-keystone-2013.1.4-2.el6ost, openstack-keystone-doc-2013.1.4-2.el6ost, python-keystone-2013.1.4-2.el6ost

Fixes 1 record

TI-2013-03926 CVE-2013-4477 · GHSA-f889-wfwm-6p7m

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a…

LOW 16

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00447 Published 2013-11-02 Partial fix · 8.0.0a0 CWE-264