CVE-2013-4477

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to…

published November 2, 2013

CVSS
—
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00447 · 37.9th percentile
Published
2013-11-02T19:00Z
EPSS history
Timeline
  • 02 NOV 19:00Z
    The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to…
    cvelistv5