CVE-2013-4477
Low
Description
The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.
SeverityLow
CVSS3.3
Exploit probability—
ProductOpenstack Grizzly
PublishedNov 2, 2013
First seenNov 2, 2013
How to fix
Update
- keystone8.0.0a0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openstack grizzly | No range specified | — |
| openstack havana | No range specified | — |
| keystonePyPI | v < 8.0.0a0 | 8.0.0a0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.