OpenStack Heat ReST API Validation Privilage Escalation Vulnerability
BID:64257
Info
OpenStack Heat ReST API Validation Privilage Escalation Vulnerability
| Bugtraq ID: | 64257 |
| Class: | Design Error |
| CVE: |
CVE-2013-6428 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 11 2013 12:00AM |
| Updated: | Jan 24 2014 12:43AM |
| Credit: | Steven Hardy of Red Hat |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
OpenStack Heat ReST API Validation Privilage Escalation Vulnerability
Keystone is prone to a privilege-escalation vulnerability.
Successful exploits may allow authenticated attackers to gain escalated privileges and perform unauthorized actions which may aid in launching further attacks.
OpenStack Keystone 2013.2.0 and above are vulnerable.
Keystone is prone to a privilege-escalation vulnerability.
Successful exploits may allow authenticated attackers to gain escalated privileges and perform unauthorized actions which may aid in launching further attacks.
OpenStack Keystone 2013.2.0 and above are vulnerable.
Exploit / POC
OpenStack Heat ReST API Validation Privilage Escalation Vulnerability
Attackers can exploit this issue using standard tools.
Attackers can exploit this issue using standard tools.
Solution / Fix
OpenStack Heat ReST API Validation Privilage Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenStack Heat ReST API Validation Privilage Escalation Vulnerability
References:
References: