PT-2014-3534 · Openstack · Openstack Identity
CVE-2014-0204
·
Published
2014-11-03
·
Updated
2026-07-02
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OpenStack Identity (Keystone) versions prior to 2014.1.1
Description
The issue arises from improper handling of role assignments to groups with IDs identical to those of users, allowing remote authenticated users to gain privileges assigned to a group with the same ID.
Recommendations
For versions prior to 2014.1.1, update to version 2014.1.1 or later to resolve the issue.
Exploit
Fix
DoS
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openstack Identity