PT-2019-15911 · Openstack+1 · Openstack Keystone+1

Daniel Preussker · Publicado 2019-12-09 · Atualizado 2022-05-24 · CVE-2019-19687

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions 15.0.0 through 16.0.0

Description The issue allows any user with a role on a project to list any credentials using the "/v3/credentials" API endpoint when enforce scope is false. This could lead to data leakage, including sign-on information for Time-based One Time Passwords (TOTP), as users with a role on a project can view any other users' credentials. Deployments with enforce scope set to false are affected.

Recommendations For OpenStack Keystone versions 15.0.0 through 16.0.0, consider setting enforce scope to true to mitigate the risk of data leakage. As a temporary workaround, restrict access to the "/v3/credentials" API endpoint to minimize the risk of exploitation.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-19687

GHSA-2J23-FWQM-MGWR

PYSEC-2019-29

RHSA-2019:4358

USN-4262-1

Produtos afetados

Openstack Keystone

Ubuntu

Referências · 27

• 🔥 https://bugs.launchpad.net/keystone/+bug/1855080 · Exploit
• https://github.com/openstack/keystone · Nota
• https://github.com/openstack/keystone/commit/bd3f63787151183f4daa43578aa491856fefae5b · Nota
• https://github.com/openstack/keystone/commit/17947516b0095c51da5cff94771247f2e7c44ee6 · Nota
• https://github.com/openstack/keystone/commit/17c337dbdbfb9d548ad531c2ad0483c9bce5b98f · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2019-29.yaml · Nota
• https://access.redhat.com/errata/RHSA-2019:4358 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-19687 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1781470 · Nota
• https://review.opendev.org/#/c/697611 · Correção
• https://cve.org/CVERecord?id=CVE-2019-19687 · Nota de Segurança
• https://git.openstack.org/cgit/openstack/keystone/commit/?id=bd3f63787151183f4daa43578aa491856fefae5b · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-19687 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2019-19687 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19687 · Aviso do Fabricante