Skip to content
OpenAdvisories
Unscored RHSA-2014:0113 1 CVE

Red Hat Security Advisory: openstack-keystone security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-keystone 0:2013.1.4-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-keystone-doc 0:2013.1.4-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 python-keystone 0:2013.1.4-2.el6ost

Vulnerabilities 1

  • Low —
    CVE-2013-4477

    OpenStack Identity Keystone Privilege Escalation vulnerability

    The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

    keystone keystone Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1024401
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0113.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4477
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4477
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4477