The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrary services.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom
    before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for
    an arbitrary user or get, create, or delete arbitrary services. (CVE-2012-4456)

- Require authz to update user's tenant (CVE-2012-3542)

    - Delete user tokens after role grant/revoke       (CVE-2012-4413)

    - Fails to validate tokens in Admin API (CVE-2012-4456)

    - Fails to raise Unauthorized user error for disabled       tenant (CVE-2012-4457)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
416920	SCA: security update for keystone (GHSA-mf98-r2gf-2x3w)	Tenable Cloud Security	SCA Checks	Local	critical
416920	SCA: security update for keystone (GHSA-mf98-r2gf-2x3w)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
62417	Fedora 17 : openstack-keystone-2012.1.2-4.fc17 (2012-13075)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2012-4456

critical

Tenable Plugins

critical

critical

high