Red Hat Security AdvisoryRHSA-2014:0994
openstack-keystone security update
Released 2014-07-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-keystone-2013.1.5-3.el6ost, openstack-keystone-doc-2013.1.5-3.el6ost, python-keystone-2013.1.5-3.el6ost
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-keystone-2013.2.3-7.el6ost, openstack-keystone-doc-2013.2.3-7.el6ost, python-keystone-2013.2.3-7.el6ost
Fixes 2 records
Priority LOW 33
OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01907 · Published 2014-10-26 · Partial fix CWE-863
Priority LOW 31
OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) tr…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.02327 · Published 2014-06-17 · Partial fix · 8.0.0a0 CWE-269
