CVE-2012-5571
Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling
- State
- Published
- Severity
- 5.4 Medium
- Published
- Dec 18, 2012
- Updated
- Oct 30, 2026
- Reserved
- Oct 24, 2012
Description
A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.4 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | redhat |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
OpenStack Essex for RHEL 6Red Hat |
|
OpenStack Folsom for RHEL 6Red Hat |
|
Red Hat OpenStack Platform 13 (Queens)Red Hat | |
Red Hat OpenStack Platform 16.2Red Hat | |
Red Hat OpenStack Platform 16.2Red Hat | |
Red Hat OpenStack Platform 17.1Red Hat | |
Red Hat OpenStack Platform 17.1Red Hat | |
Red Hat OpenStack Platform 18.0Red Hat | |
Red Hat OpenStack Platform 18.0Red Hat |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
- http://rhn.redhat.com/errata/RHSA-2012-1556.html
- http://rhn.redhat.com/errata/RHSA-2012-1557.html
- http://secunia.com/advisories/51423
- http://secunia.com/advisories/51436
- http://www.openwall.com/lists/oss-security/2012/11/28/5
- http://www.openwall.com/lists/oss-security/2012/11/28/6
- http://www.securityfocus.com/bid/56726
- http://www.ubuntu.com/usn/USN-1641-1
- RHSA-2012:1556vendor-advisory
- RHSA-2012:1557vendor-advisory
- https://access.redhat.com/security/cve/CVE-2012-5571vdb-entry
- https://bugs.launchpad.net/keystone/+bug/1064914
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80333
- https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b
- https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19
- https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.