CVE-2020-12690

8.8HIGH

Key Information

Vendor
Openstack
Status
Keystone
Vendor
CVE Published:
7 May 2020

Summary

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. This results in the provided keystone token having more role assignments than the creator intended, possibly giving unintended escalated access.

References

https://security.openstack.org/ossa/OSSA-2020-005.html
x_refsource_CONFIRM
https://bugs.launchpad.net/keystone/+bug/1873290
x_refsource_MISC
https://www.openwall.com/lists/oss-security/2020/05/06/6
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.