CVE-2012-5571 in Folsom
요약 (영어)
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed from a tenant, which allows remote authenticated users to bypass intended authorization restrictions by leveraging a token for the removed user role.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2012. 10. 24.
공개
2012. 12. 17.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 63196 | OpenStack Folsom Authorization 권한 상승 | 255 | 정의되지 않음 | 공식 수정 | CVE-2012-5571 |