Read the docs
TI-2013-00213 Aliases CVE-2013-0282GHSA-8833-qrvm-wc3h

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not…

Priority LOW 26CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · None · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-287.

Summary

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.

Why it matters now

EPSS 0.01761 78th percentileScored 2026-11-07
Fix Fixed Keystone (PyPI): 8.0.0a0Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—Keystone (PyPI)before 8.0.0a08.0.0a0Patch availableGHSA-8833-qrvm-wc3h
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • Keystone (PyPI) Vendor— Affected before 8.0.0a0 Fixed in 8.0.0a0 Patch available GHSA-8833-qrvm-wc3h

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*2012.1 – 2012.1.3; 2012.2 – 2012.2.4VulnerableOpenStack
cpe:2.3:a:openstack:keystone:2013.1:milestone1:*:*:*:*:*:*2013.1 milestone1VulnerableOpenStack
cpe:2.3:a:openstack:keystone:2013.1:milestone2:*:*:*:*:*:*2013.1 milestone2VulnerableOpenStack
cpe:2.3:a:openstack:keystone:2013.1:milestone3:*:*:*:*:*:*2013.1 milestone3VulnerableOpenStack
  • cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:* Versions 2012.1 – 2012.1.3; 2012.2 – 2012.2.4 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:keystone:2013.1:milestone1:*:*:*:*:*:* Versions 2013.1 milestone1 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:keystone:2013.1:milestone2:*:*:*:*:*:* Versions 2013.1 milestone2 Vulnerable ·OpenStack
  • cpe:2.3:a:openstack:keystone:2013.1:milestone3:*:*:*:*:*:* Versions 2013.1 milestone3 Vulnerable ·OpenStack

Remediation

  • Fix · GHSA-8833-qrvm-wc3h Keystone (PyPI) Fixed in 8.0.0a0 Advisory →

Red Hat 1 advisory

  • RHSA-2013:0596 Released 2013-03-05 · Red Hat rating Moderate
    openstack-keystone security, bug fix, and enhancement update
    • OpenStack Folsom openstack-keystone-2012.2.3-3.el6ost, openstack-keystone-doc-2012.2.3-3.el6ost, python-keystone-2012.2.3-3.el6ost

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
OpenStack FolsomFixed RHSA-2013:0596

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-0282
  2. 2026-10-03 Alias added: GHSA-8833-qrvm-wc3h

References

Advisory 8

Other 6

  • TI-2026-25942 Incorrect authorization in OpenStack Keystone CVSS 3.1MEDIUM 5.3
  • TI-2020-10091 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. CVSS 3.1HIGH 8.8
  • TI-2020-10090 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. CVSS 3.1HIGH 8.8
  • TI-2019-14184 OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials… CVSS 3.1HIGH 8.8
  • TI-2020-10089 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. CVSS 3.1HIGH 8.8
  • TI-2014-02273 The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before… CVSS 2.0HIGH 7.8
See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences