CVE-2013-6391: Medium severity Openstack Keystone vulnerability
The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6391?
CVE-2013-6391 is classified with high severity due to the potential for privilege escalation by remote trust users.
How do I fix CVE-2013-6391?
To fix CVE-2013-6391, upgrade the OpenStack Keystone package to version 2013.2.1 or later.
Who is affected by CVE-2013-6391?
CVE-2013-6391 affects users of OpenStack Identity (Keystone) versions prior to Havana 2013.2.1 and Icehouse before icehouse-2.
What kind of attack does CVE-2013-6391 enable?
CVE-2013-6391 enables remote attackers to gain unauthorized privileges by generating EC2 credentials from a trust-scoped token.
Is CVE-2013-6391 related to any specific operating systems?
Yes, CVE-2013-6391 affects OpenStack Keystone implementations on platforms like Ubuntu 13.10 and Red Hat OpenStack 4.0.