Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-0204
6.5
MEDIUMCVSS v2
Published
November 3, 2014
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.
openstack/keystone
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.>= 2014.1, < 2014.1.1, < 8.0.0a0NVD