CVE-2013-0282
CVE-2013-0282
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
EPSS 1.8% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
keystone Debian:12
- Affected ranges
- ECOSYSTEM: < 2012.1.1-13
Update to 2012.1.1-13
keystone Debian:13
- Affected ranges
- ECOSYSTEM: < 2012.1.1-13
Update to 2012.1.1-13
keystone Debian:14
- Affected ranges
- ECOSYSTEM: < 2012.1.1-13
Update to 2012.1.1-13
keystone PyPI
- Affected ranges
- ECOSYSTEM: < 8.0.0a0
Update to 8.0.0a0
Original sources
- https://bugs.launchpad.net/keystone/+bug/1121494
- https://review.openstack.org/#/c/22321/
- http://www.openwall.com/lists/oss-security/2013/02/19/3
- https://launchpad.net/keystone/grizzly/2013.1
- https://launchpad.net/keystone/+milestone/2012.2.4
- https://review.openstack.org/#/c/22319/
- https://review.openstack.org/#/c/22320/
- https://nvd.nist.gov/vuln/detail/CVE-2013-0282