CVE-2013-4477

Openstack Grizzly < 8.0.0a0 - Access Control

Title source: rule

Description

The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.

Scores

EPSS 0.0015
EPSS Percentile 35.6%

Classification

CWE
CWE-264
Status draft

Affected Products (3)

openstack/grizzly
openstack/havana
pypi/keystone < 8.0.0a0PyPI

Timeline

Published Nov 02, 2013
Tracked Since Feb 18, 2026