Unscored severity · published Apr 12, 2013
CVE-2013-0282
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style…
–
CVSS
1.8%
EPSS
No
On KEV
Description
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keystone · Openstack
2012.1 through 2012.1.3; 2012.2 through 2012.2.4; 2013.1; 2013.1; 2013.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0282
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0282
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/02/19/3
Third Party Advisory
https://bugs.launchpad.net/keystone/+bug/1121494
Third Party Advisory
https://launchpad.net/keystone/+milestone/2012.2.4
Third Party Advisory
https://launchpad.net/keystone/grizzly/2013.1
Vendor Advisory
https://review.openstack.org/#/c/22319/
Vendor Advisory
https://review.openstack.org/#/c/22320/
More from Keystone
8.8
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2020-12691
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0
8.8
CVE-2020-12690
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0