OpenStack Keystone Illegal Access Vulnerability

Release date:
Updated on: 2012-09-02

Affected Systems:
Openstack Keystone
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55326
Cve id: CVE-2012-3542

OpenStack Keystone is a project that provides identity, Token, directory, and policy services for the OpenStack series.

Keystone has an unauthorized access vulnerability. Attackers can exploit this vulnerability to access affected applications without authorization.

<* Source: Dolph Mathews
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Openstack
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://horizon.openstack.org/intro.html