Medium severity · published Dec 18, 2012
CVE-2012-5571
A flaw was found in OpenStack Keystone
5.4
CVSS
2.1%
EPSS
No
On KEV
Description
A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Essex · Openstack
2012.1 · source: NVD
FO
Folsom · Openstack
2012.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5571
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5571
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-1556.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-1557.html
Vendor Advisory
http://secunia.com/advisories/51423
Vendor Advisory
http://secunia.com/advisories/51436
Patch
http://www.openwall.com/lists/oss-security/2012/11/28/5
More from Essex
8.8
CVE-2013-0261
A flaw was found in PackStack
7.6
CVE-2013-0335
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC…
5.5
CVE-2013-0266
A flaw was found in the `puppetlabs-cinder` module, as used in PackStack
–
CVE-2013-1838
OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial…
–
CVE-2013-0208
The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a…