CVE-2012-3542

Publication date 30 August 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user’s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
keystone 12.04 LTS precise
Fixed 2012.1+stable~20120824-a16a0ab9-0ubuntu2.1
11.10 oneiric
Not affected
11.04 natty Not in release
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release