CVE-2017-2673 in OpenStack Identityinfo

Zusammenfassung

von MITRE

An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Zuständig

Red Hat, Inc.

Reservieren

01.12.2016

Veröffentlichung

19.07.2018

Moderieren

akzeptiert

Eintrag

VDB-121960

CPE

bereit

EPSS

0.00572

KEV

nein

Aktivitäten

very low

Quellen

Might our Artificial Intelligence support you?

Check our Alexa App!