Описание
OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2012.2~f3-0ubuntu1 |
| hardy | DNE | |
| lucid | DNE | |
| natty | DNE | |
| oneiric | ignored | |
| precise | released | 2012.1+stable~20120824-a16a0ab9-0ubuntu2 |
| quantal | not-affected | 2012.2~f3-0ubuntu1 |
| upstream | released | 2012.1.1-9 |
Показывать по
4 Medium
CVSS2
Связанные уязвимости
OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.
OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.
OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 do ...
OpenStack Keystone Token authorization for a user in a disabled tenant is allowed
4 Medium
CVSS2