QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3542

Published: Sep 5, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

[openstack] 20120830 [OSSA 2012-013] Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542)

mailing-list

x_refsource_MLIST

https://github.com/openstack/keystone/commit/c13d0ba606f7b2bdc609a7f388334e5efec3f3aa

x_refsource_CONFIRM

[oss-security] 20120830 [OSSA 2012-013] Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542)

mailing-list

x_refsource_MLIST

https://github.com/openstack/keystone/commit/5438d3b5a219d7c8fa67e66e538d325a61617155

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

https://bugs.launchpad.net/keystone/+bug/1040626

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.