NVD

Id
36635  
Name
CVE-2013-0282  
Description
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-04-12  
Modified Date
2013-04-15  
Seq
2013-0282  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187226 36635 CVE-2013-0282 [oss-security] 20130219 [OSSA 2013-005] Keystone EC2-style authentication accepts disabled user/tenants (CVE-2013-0282)  View
187227 36635 CVE-2013-0282 https://bugs.launchpad.net/keystone/+bug/1121494  View
187228 36635 CVE-2013-0282 https://launchpad.net/keystone/+milestone/2012.2.4  View
187229 36635 CVE-2013-0282 https://launchpad.net/keystone/grizzly/2013.1  View
187230 36635 CVE-2013-0282 https://review.openstack.org/#/c/22319/  View
187231 36635 CVE-2013-0282 https://review.openstack.org/#/c/22320/  View
187232 36635 CVE-2013-0282 https://review.openstack.org/#/c/22321/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20658 JVNDB-2013-002233 複数の OpenStack コンポーネントにおけるアクセスの制限を回避される脆弱性 OpenStack Keystone の Grizzly 、Folsom および Essex は、EC2-style 認証を使用している場合、(1) ユーザ、(2) テナント、または (3) ドメインが有効かどうか適切に確認しないため、アクセスの制限を回避される脆弱性が存在します。 CVE-2013-0282 60224 CVE-2013-0282 36635 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002233.html 2013-02-20 2013-04-16 View