CVE-2012-3542: High severity red hat openstack essex vulnerability
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3542?
CVE-2012-3542 is considered a high severity vulnerability due to its potential for unauthorized user modification in OpenStack.
How do I fix CVE-2012-3542?
To fix CVE-2012-3542, update OpenStack Keystone to version 2012.1 or later.
Who is affected by CVE-2012-3542?
CVE-2012-3542 affects users of OpenStack Keystone in versions prior to folsom-rc1 and OpenStack Essex 2012.1.
What is the impact of CVE-2012-3542?
The impact of CVE-2012-3542 is that remote attackers can exploit it to add arbitrary users to any tenant.
Is there a patch available for CVE-2012-3542?
Yes, a patch is available in OpenStack versions 2012.1 and above to remediate CVE-2012-3542.