PT-2020-13209 · Openstack+1 · Openstack Keystone+1

Kay · Published 2020-05-06 · Updated 2022-05-24 · CVE-2020-12692

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 15.0.1 OpenStack Keystone version 16.0.0

Description An issue was discovered in the EC2 API of OpenStack Keystone, where it lacks a signature TTL check for AWS Signature V4. This allows an attacker to sniff the Authorization header and then use it to reissue an OpenStack token an unlimited number of times.

Recommendations For OpenStack Keystone versions prior to 15.0.1, update to version 15.0.1 or later to resolve the issue. For OpenStack Keystone version 16.0.0, consider disabling the EC2 API until a patch is available. As a temporary workaround, restrict access to the Authorization header to minimize the risk of exploitation.

Fix

Missing Encryption of Sensitive Data

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-294

CWE-311

CWE-347

Related Identifiers

CVE-2020-12692

DSA-4679-1

GHSA-RQW2-HHRF-7936

PYSEC-2020-56

RHSA-2020:2732

RHSA-2020:3102

RHSA-2020:3105

USN-4480-1

Affected Products

Openstack Keystone

Ubuntu

References · 24

• https://ubuntu.com/security/CVE-2020-12690 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-12692 · Vendor Advisory
• https://usn.ubuntu.com/4480-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12691 · Vendor Advisory
• https://security.openstack.org/ossa/OSSA-2020-003.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-12692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12692 · Security Note
• https://ubuntu.com/security/CVE-2020-12689 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-12692 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rqw2-hhrf-7936 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4679-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-12692 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-12692 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-56 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-12692 · Security Note