CVE-2014-0204: Medium severity keystone vulnerability
OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0204?
CVE-2014-0204 has a moderate severity rating due to potential privilege escalation vulnerabilities.
How do I fix CVE-2014-0204?
To fix CVE-2014-0204, upgrade OpenStack Keystone to version 2014.1.1 or higher.
Who is affected by CVE-2014-0204?
Remote authenticated users in OpenStack Identity (Keystone) configurations before version 2014.1.1 are affected by CVE-2014-0204.
What causes the vulnerability in CVE-2014-0204?
CVE-2014-0204 is caused by improper handling of role assignments for users and groups with the same ID in OpenStack Keystone.
Which software versions are vulnerable to CVE-2014-0204?
OpenStack Keystone versions prior to 2014.1.1 are vulnerable to CVE-2014-0204.