OpenStack Keystone LDAP Assignment Security Bypass Vulnerability

Bugtraq ID:	63395
Class:	Design Error
CVE:	CVE-2013-4477
Remote:	Yes
Local:	No
Published:	Oct 29 2013 12:00AM
Updated:	Apr 13 2015 09:17PM
Credit:	The IBM OpenStack test team
Vulnerable:	Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 SuSE Cloud 2.0 Redhat OpenStack 3.0 OpenStack Keystone 0
Not Vulnerable:

OpenStack Keystone LDAP Assignment Security Bypass Vulnerability

Keystone is prone to a security-bypass vulnerability.

Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and perform unauthorized actions which may aid in launching further attacks.

Keystone (Grizzly and Havana) is affected.

OpenStack Keystone LDAP Assignment Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenStack Keystone LDAP Assignment Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenStack Keystone LDAP Assignment Security Bypass Vulnerability

References:

• OpenStack Keystone Homepage (OpenStack )
  
• Removing role adds role with LDAP backend (OpenStack)
  
• Security Advisory Moderate: openstack-keystone security update (Red Hat)