Auth bypass in Openstack

CVE-2017-12440

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.

Vulnerability class: Broken Authentication

EPSS: 0.021 (80.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Openstack — versions 07132017
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
  • cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
  • cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2017-12440?
CVE-2017-12440 is a high-severity vulnerability in Openstack, classified under Missing Authentication for Critical Function. CVSS score: 7.5/10. Published 2017-08-18.
How severe is CVE-2017-12440?
High severity. CVSS v3 base score is 7.5 out of 10.