CVE-2013-0282

2013-04-1222:55:00

Debian Security Bug Tracker

security-tracker.debian.org

0.003 Low

EPSS

Percentile

71.2%

JSON

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.

OSVersionArchitecturePackageVersionFilename
Debian12allkeystone< 2012.1.1-13keystone_2012.1.1-13_all.deb
Debian11allkeystone< 2012.1.1-13keystone_2012.1.1-13_all.deb
Debian10allkeystone< 2012.1.1-13keystone_2012.1.1-13_all.deb
Debian999allkeystone< 2012.1.1-13keystone_2012.1.1-13_all.deb
Debian13allkeystone< 2012.1.1-13keystone_2012.1.1-13_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	keystone	< 2012.1.1-13	keystone_2012.1.1-13_all.deb
Debian	11	all	keystone	< 2012.1.1-13	keystone_2012.1.1-13_all.deb
Debian	10	all	keystone	< 2012.1.1-13	keystone_2012.1.1-13_all.deb
Debian	999	all	keystone	< 2012.1.1-13	keystone_2012.1.1-13_all.deb
Debian	13	all	keystone	< 2012.1.1-13	keystone_2012.1.1-13_all.deb

CVE-2013-0282

Related