CVE-2012-5483

Related Files

Red Hat Security Advisory 2012-1556-01

Posted Dec 11, 2012

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2012-1556-01 - The openstack-keystone packages provide Keystone, a Python implementation of the OpenStack identity service API, which provides Identity, Token, Catalog, and Policy services. The openstack-keystone packages have been upgraded to upstream version 2012.1.3, which provides a number of bug fixes and enhancements over the previous version. This update also fixes the following security issues: It was found that Keystone did not correctly handle users being removed from tenants when Amazon Elastic Compute Cloud style credentials were in use. When a user was removed from a tenant, they retained the privileges provided by that tenant, allowing them to access resources they should no longer have access to.

tags | advisory, python

systems | linux, redhat

advisories | CVE-2012-5483, CVE-2012-5571

SHA-256 | c03a7ac3f00a8f63456f921f8cd1f743a8d990c673054c23a88f4c3f9099534a

Download | Favorite | View