OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade keystone | Jul 30, 2024 | Aug 20, 2013 |
| Suse | — | Upgrade openstack-keystone-testUpgrade openstack-keystone-docUpgrade python-keystoneUpgrade openstack-keystone | Dec 12, 2013 | Aug 20, 2013 |
| Ubuntu | — | Upgrade python-keystone | Nov 8, 2024 | Aug 20, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub