OpenStack Identity Keystone Privilege Escalation vulnerability
Low severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Apr 8, 2024
Description
Published by the National Vulnerability Database
Nov 2, 2013
Published to the GitHub Advisory Database
May 17, 2022
Reviewed
Apr 8, 2024
Last updated
Apr 8, 2024
The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.
References