CVE-2014-3520 | BDVDB-2026-65848 Detail

Description#

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.launchpad.net/keystone/+bug/1331912
http://lists.openstack.org/pipermail/openstack-announce/2014-July/000248.html
http://secunia.com/advisories/59426

Exploit#

No public exploit known

History#

Version 12014-10-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.