Privilege escalation in Openstack Keystone

CVE-2013-6391

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.

Vulnerability class: Privilege Escalation

EPSS: 0.022 (81.0th percentile) — read the EPSS interpretation.

Affected products

Openstack Keystone
Canonical Ubuntu_linux — versions 13.10
Redhat Openstack — versions 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Exploit, Third Party Advisory, Issue Tracking)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)