ghsa-pfwx-2ff5-2g47
Vulnerability from github
Published
2022-05-24 17:06
Modified
2022-05-24 17:06
Details
The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete arbitrary resources, contrary to expectations.
{ "affected": [], "aliases": [ "CVE-2019-3683" ], "database_specific": { "cwe_ids": [ "CWE-732" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-01-17T11:15:00Z", "severity": "MODERATE" }, "details": "The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full \"member\" role access to every project. This allowed these users to access, modify, create and delete arbitrary resources, contrary to expectations.", "id": "GHSA-pfwx-2ff5-2g47", "modified": "2022-05-24T17:06:54Z", "published": "2022-05-24T17:06:54Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3683" }, { "type": "WEB", "url": "https://bugzilla.suse.com/show_bug.cgi?id=1124864" }, { "type": "WEB", "url": "https://www.suse.com/security/cve/CVE-2019-3683" } ], "schema_version": "1.4.0", "severity": [] }
Loading...