Total vulnerabilities in the database
OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID.
| Software | From | Fixed in |
|---|---|---|
| openstack / keystone | 2014.1 | 2014.1.1 |