NVD

Id
41485  
Name
CVE-2013-6428  
Description
The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-14  
Modified Date
2014-03-05  
Seq
2013-6428  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209625 41485 CVE-2013-6428 RHSA-2014:0090  View
209626 41485 CVE-2013-6428 [oss-security] 20131211 [OSSA 2013-035] Heat ReST API doesn"t respect tenant scoping (CVE-2013-6428)  View
209627 41485 CVE-2013-6428 https://launchpad.net/bugs/1256983  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23973 JVNDB-2013-005548 OpenStack Orchestration API の ReST API におけるテナントスコープの制限を回避される脆弱性 OpenStack Orchestration API (Heat) の ReST API には、テナントスコープの制限を回避される脆弱性が存在します。 CVE-2013-6428 66370 CVE-2013-6428 41485 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005548.html 2013-12-14 2015-08-07 View