OpenStack Keystone CVE-2017-2673 Security Bypass Vulnerability
BID:98032
CVE-2017-2673 |Info
OpenStack Keystone CVE-2017-2673 Security Bypass Vulnerability
| Bugtraq ID: | 98032 |
| Class: | Configuration Error |
| CVE: |
CVE-2017-2673 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 25 2017 12:00AM |
| Updated: | May 02 2017 02:10AM |
| Credit: | Boris Bobrov from Mail.Ru. |
| Vulnerable: |
Redhat OpenStack Platform 9.0 Redhat OpenStack Platform 11 Redhat OpenStack Platform 10 OpenStack Keystone 11.0 OpenStack Keystone 10.0.1 OpenStack Keystone 10.0 |
| Not Vulnerable: | |
Discussion
OpenStack Keystone CVE-2017-2673 Security Bypass Vulnerability
Keystone is prone to a security-bypass vulnerability.
Successful exploits may allow an attackers to bypass certain intended security restrictions and perform unauthorized actions, which may aid in launching further attacks.
OpenStack Kesytone 10.0.0, 10.0.1 and 11.0.0 are vulnerable; other versions may also be affected.
Keystone is prone to a security-bypass vulnerability.
Successful exploits may allow an attackers to bypass certain intended security restrictions and perform unauthorized actions, which may aid in launching further attacks.
OpenStack Kesytone 10.0.0, 10.0.1 and 11.0.0 are vulnerable; other versions may also be affected.
Exploit / POC
OpenStack Keystone CVE-2017-2673 Security Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
OpenStack Keystone CVE-2017-2673 Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenStack Keystone CVE-2017-2673 Security Bypass Vulnerability
References:
References: