Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Keystone LDAP Assignment 安全绕过漏洞
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。OpenStack Keystone是其中的一个用于身份验证的项目，提供身份、令牌、目录和策略服务。 OpenStack Identity (Keystone) Grizzly和Havana版本中的LDAP后台中的角色转变代码存在安全漏洞。当删除用户的角色时，实际上获得了该角色。本地攻击者可利用该漏洞获取特权。
CVSS Information
N/A
Vulnerability Type
N/A