OpenStack Keystone token verification Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Openstack Keystone
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55524
Cve id: CVE-2012-4413

OpenStack Keystone is a project that provides identity, Token, directory, and policy services for the OpenStack series.

Keystone has a security restriction bypass vulnerability, which allows authenticated attackers to bypass certain security restrictions and perform unauthorized operations.

<* Source: Ryan Lane
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Openstack
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://horizon.openstack.org/intro.html