Lucene search
Veracode Vulnerability DatabaseVERACODE:25207HistoryMay 08, 2020 - 5:49 a.m.
Privilege Escalation
2020-05-0805:49:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.011 Low
EPSS
Percentile
84.3%
openstack keystone is vulnerable to privilege escalation. A low-privileged user with a limited role is able to authenticate against Keystone using an EC2 credentials to obtain all project roles of a trust/oauth/application_credential owner.
References
www.openwall.com/lists/oss-security/2020/05/07/2
bugs.launchpad.net/keystone/+bug/1872735
github.com/openstack/keystone/commit/79d7d929e10578cc5ff76bb24b6398b38bf63f52
lists.apache.org/thread.html/re4ffc55cd2f1b55a26e07c83b3c22c3fe4bae6054d000a57fb48d8c2@%3Ccommits.druid.apache.org%3E
security.openstack.org/ossa/OSSA-2020-004.html
usn.ubuntu.com/4480-1/
www.openwall.com/lists/oss-security/2020/05/06/5
Related
github
github
debiancve
debiancve
CVE-2020-12689
2020-05-07 00:15:10
osv
osv
PYSEC-2020-53
2020-05-07 00:15:00
CVE-2020-12689
2020-05-07 00:15:10
keystone - security update
2020-05-06 00:00:00
cve
cve
CVE-2020-12689
2020-05-07 00:15:10
ubuntucve
ubuntucve
CVE-2020-12689
2020-05-07 00:00:00
CVE-2020-12691
2020-05-07 00:00:00
prion
prion
Code injection
2020-05-07 00:15:00
redhatcve
redhatcve
CVE-2020-12689
2020-05-07 19:39:53
cvelist
cvelist
CVE-2020-12689
2020-05-06 23:43:20
nvd
nvd
CVE-2020-12689
2020-05-07 00:15:10
nessus
nessus
RHEL 7 : openstack-keystone (RHSA-2020:3096)
2020-07-22 00:00:00
RHEL 7 : openstack-keystone (RHSA-2020:2732)
2020-06-24 00:00:00
Ubuntu 18.04 LTS : OpenStack Keystone vulnerabilities (USN-4480-1)
2020-09-02 00:00:00
redhat
redhat
(RHSA-2020:3096) Important: openstack-keystone security update
2020-07-22 12:02:47
(RHSA-2020:2732) Important: openstack-keystone security update
2020-06-24 12:25:05
(RHSA-2020:3105) Important: openstack-keystone security update
2020-07-22 12:28:32
openvas
openvas
Ubuntu: Security Advisory (USN-4480-1)
2020-09-02 00:00:00
Debian: Security Advisory (DSA-4679-1)
2020-05-08 00:00:00
ibm
ibm
ubuntu
ubuntu
OpenStack Keystone vulnerabilities
2020-09-01 00:00:00