CVE-2013-4477 in OpenStack Grizzly
Summary
The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.
Reservation
06/12/2013
Disclosure
11/02/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65407 | OpenStack Grizzly access control | 264 | Not defined | Not defined | CVE-2013-4477 |