CVE-2012-5571 in Folsom
Summary
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed from a tenant, which allows remote authenticated users to bypass intended authorization restrictions by leveraging a token for the removed user role.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
10/24/2012
Disclosure
12/17/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 63196 | OpenStack Folsom Authorization credentials management | 255 | Not defined | Official fix | CVE-2012-5571 |