OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities
BID:54709
Info
OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 54709 |
| Class: | Design Error |
| CVE: |
CVE-2012-3426 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2012 12:00AM |
| Updated: | Sep 03 2012 06:10PM |
| Credit: | Derek Higgins |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 |
| Not Vulnerable: | |
Discussion
OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities
Keystone is prone to multiple security-bypass vulnerabilities.
Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and gain extended access to the account.
Keystone is prone to multiple security-bypass vulnerabilities.
Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and gain extended access to the account.
Exploit / POC
OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities
These issues are trivial to exploit. An attacker needs to have an authorized account on the application.
These issues are trivial to exploit. An attacker needs to have an authorized account on the application.
Solution / Fix
OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities
References:
References: