OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:11
Type | Values Removed | Values Added |
---|---|---|
Summary | OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540. |
Information
Published : 2012-09-05 23:55
Updated : 2024-02-28 12:00
NVD link : CVE-2012-3542
Mitre link : CVE-2012-3542
CVE.ORG link : CVE-2012-3542
JSON object : View
Products Affected
openstack
- horizon
- essex
CWE
CWE-264
Permissions, Privileges, and Access Controls