Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3542
HistoryAug 30, 2012 - 12:00 a.m.

CVE-2012-3542

2012-08-3000:00:00
ubuntu.com
ubuntu.com
18

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.008

Percentile

81.6%

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and
OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user
to an arbitrary tenant via a request to update the user’s default tenant to
the administrative API. NOTE: this identifier was originally incorrectly
assigned to an open redirect issue, but the correct identifier for that
issue is CVE-2012-3540.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchkeystone< 2012.1+stable~20120824-a16a0ab9-0ubuntu2.1UNKNOWN

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.008

Percentile

81.6%