GitHub Advisoryadvisory · PyPI

GHSA-c4p9-87h3-7vr4 OpenStack Identity Keystone Improper Privilege Management

MEDIUM Published 2022-05-13 Modified 2024-05-14 Official page ↗
Aliases
CVE-2014-0204
Ecosystem
PyPI
Packages
keystone
Severity
Moderate
Weaknesses
CWE-269
Reviewed
2024-05-14

Affected packages

• PyPI keystone: < 8.0.0a0 → fixed in 8.0.0a0

Description

OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.

Related

Alias · CVE (1)

  • CVE-2014-0204 OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user,… vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References