VULNERABILITY INTELLIGENCE

CVE-2014-0204

CVSS score6.5 MEDIUM
EPSS probability1.40%
CISA KEVNot currently listed
Published2014-11-03
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references