Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3520

Опубликовано: 26 окт. 2014
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*
Версия от 2013.2 (включая) до 2013.2.4 (исключая)
cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*
Версия от 2014.1 (включая) до 2014.1.2 (исключая)

EPSS

Процентиль: 62%
0.00428
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

ubuntu логотип

CVE-2014-3520

ubuntu
больше 11 лет назад

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

redhat логотип

CVE-2014-3520

redhat
больше 11 лет назад

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

debian логотип

CVE-2014-3520

debian
больше 11 лет назад

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, ...

github логотип

GHSA-mv96-4gm9-mjhw

github
больше 3 лет назад

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

EPSS

Процентиль: 62%
0.00428
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-863