CVE-2012-5571

A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.

• CWE-639
• CWE-255

• http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
• http://rhn.redhat.com/errata/RHSA-2012-1556.html
• http://rhn.redhat.com/errata/RHSA-2012-1557.html
• http://secunia.com/advisories/51423Vendor Advisory
• http://secunia.com/advisories/51436Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/11/28/5Patch
• http://www.openwall.com/lists/oss-security/2012/11/28/6Patch
• http://www.securityfocus.com/bid/56726
• http://www.ubuntu.com/usn/USN-1641-1
• https://access.redhat.com/security/cve/CVE-2012-5571
• https://bugs.launchpad.net/keystone/+bug/1064914Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80333
• https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713bPatch
• https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19Patch
• https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
• http://rhn.redhat.com/errata/RHSA-2012-1556.html
• http://rhn.redhat.com/errata/RHSA-2012-1557.html
• http://secunia.com/advisories/51423Vendor Advisory
• http://secunia.com/advisories/51436Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/11/28/5Patch
• http://www.openwall.com/lists/oss-security/2012/11/28/6Patch
• http://www.securityfocus.com/bid/56726
• http://www.ubuntu.com/usn/USN-1641-1
• https://bugs.launchpad.net/keystone/+bug/1064914Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80333
• https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713bPatch
• https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19Patch
• https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653Patch

Published

Dec 18, 2012

Last Modified

Jun 16, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5565Cross-site scripting (XSS) vulnerability in js/compose-dimp.…
• CVE-2012-5566Multiple cross-site scripting (XSS) vulnerabilities in Horde…
• CVE-2012-5567Multiple cross-site scripting (XSS) vulnerabilities in Horde…
• CVE-2012-5568Apache Tomcat through 7.0.x allows remote attackers to cause…
• CVE-2012-5569Multiple cross-site scripting (XSS) vulnerabilities in the B…
• CVE-2012-5570The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal a…4.3
• CVE-2012-5572CRLF injection vulnerability in the cookie method (lib/Dance…
• CVE-2012-5573The connection_edge_process_relay_cell function in or/relay.…
• CVE-2012-5574lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allow…
• CVE-2012-5575Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and …
• CVE-2012-5576Multiple stack-based buffer overflows in file-xwd.c in the X…
• CVE-2012-5577Python keyring lib before 0.10 created keyring files with wo…7.5