The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-12-14T17:00:00

Updated: 2024-08-06T17:39:01.159Z

Reserved: 2013-11-04T00:00:00

Link: CVE-2013-6391

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-12-14T17:21:46.663

Modified: 2024-11-21T01:59:08.070

Link: CVE-2013-6391

cve-icon Redhat

Severity : Moderate

Publid Date: 2013-12-11T00:00:00Z

Links: CVE-2013-6391 - Bugzilla