Security Bulletin: Openstack Keystone vulnerabilities affects IBM Spectrum Scale (CVE-2020-12689)

Summary

IBM Spectrum Scale, shipped with Openstack keystone, is exposed to vulnerabilities as detailed below.

Vulnerability Details

CVEID:CVE-2020-12689
**DESCRIPTION:**OpenStack Keystone could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper permission validation. By creating an EC2 credential, an authenticated attacker could exploit this vulnerability to gain elevated privileges as admin.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/181609 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2020-12692
**DESCRIPTION:**OpenStack Keystone could allow a remote attacker to bypass security restrictions, caused by improper signature TTL validation for AWS Signature V4. By sniffing the Authorization header, an attacker could exploit this vulnerability to reissue an OpenStack token an unlimited number of times.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/181612 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N)

CVEID:CVE-2020-12691
**DESCRIPTION:**OpenStack Keystone could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper permission validation. By creating an EC2 credential, an authenticated attacker could exploit this vulnerability to gain elevated privileges as admin.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/181611 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

CVEID:CVE-2020-12690
**DESCRIPTION:**OpenStack Keystone could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an issue with the provided keystone token having more role assignments than the creator intended. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges .
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/181610 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Remediation/Fixes

For IBM Spectrum Scale V5.0.0.0 through 5.0.5, apply V5.0.5.1 available from FixCentral at:

https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=Software%20defined%20storage&product=ibm/StorageSoftware/IBM+Spectrum+Scale&release=5.0.5&platform=All&function=all

Workarounds and Mitigations

None