CVE-2013-4471

The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user.

CVSS v2.0 5.5 MEDIUM

5.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability : 8.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://lists.openstack.org/pipermail/openstack/2013-November/003299.html	Vendor Advisory
https://bugs.launchpad.net/horizon/+bug/1237989	Issue Tracking Patch Third Party Advisory
http://lists.openstack.org/pipermail/openstack/2013-November/003299.html	Vendor Advisory
https://bugs.launchpad.net/horizon/+bug/1237989	Issue Tracking Patch Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:openstack:horizon:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:55

Type	Values Removed	Values Added
References	~~() http://lists.openstack.org/pipermail/openstack/2013-November/003299.html - Vendor Advisory~~	() http://lists.openstack.org/pipermail/openstack/2013-November/003299.html - Vendor Advisory
References	~~() https://bugs.launchpad.net/horizon/+bug/1237989 - Issue Tracking, Patch, Third Party Advisory~~	() https://bugs.launchpad.net/horizon/+bug/1237989 - Issue Tracking, Patch, Third Party Advisory

Information

Published : 2014-05-14 19:55

Updated : 2024-11-21 01:55

NVD link : CVE-2013-4471

Mitre link : CVE-2013-4471

CVE.ORG link : CVE-2013-4471

JSON object : View

Products Affected

openstack

horizon

CWE

CWE-287

Improper Authentication

{"id": "CVE-2013-4471", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-05-14T19:55:10.277", "references": [{"url": "http://lists.openstack.org/pipermail/openstack/2013-November/003299.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugs.launchpad.net/horizon/+bug/1237989", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://lists.openstack.org/pipermail/openstack/2013-November/003299.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugs.launchpad.net/horizon/+bug/1237989", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication token for that user."}, {"lang": "es", "value": "La API Identity v3 en OpenStack Dashboard (Horizon) anterior a 2013.2 no requiere la contrase\u00f1a actual cuando cambia contrase\u00f1as para cuentas de usuarios, lo que facilita a atacantes remotos cambiar una contrase\u00f1a de usuario mediante el aprovechamiento del token de autenticaci\u00f3n para este usuario."}], "lastModified": "2024-11-21T01:55:38.080", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openstack:horizon:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB7E5E20-1AE0-41D8-BFF5-F04EED9E6470", "versionEndExcluding": "2013.2", "versionStartIncluding": "2013.1"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}