CVE-2014-0204 in OpenStack Keystoneinfo

Zusammenfassung (Englisch)

OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.

Reservieren

03.12.2013

Veröffentlichung

03.11.2014

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
72788	OpenStack Keystone Privileges erweiterte Rechte	264	Nicht definiert	Offizieller Fix	CVE-2014-0204

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

◂ ZurückÜbersichtWeiter ▸

Want to know what is going to be exploited?

We predict KEV entries!