VYPR
Get started
← All advisories
High severityNVD Advisory· Published Sep 5, 2012· Updated Apr 29, 2026

CVE-2012-3542

CVE-2012-3542

Description

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
keystonePyPI
< 2012.12012.1

Affected products

2

Patches

2
c13d0ba606f7

Require authz to update user's tenant (bug 1040626)

https://github.com/openstack/keystoneDolph MathewsAug 23, 2012via ghsa
commit
1 file changed · +1 −0
  • keystone/identity/core.py+1 −0 modified
    @@ -515,6 +515,7 @@ def set_user_password(self, context, user_id, user):
 
     def update_user_tenant(self, context, user_id, user):
         """Update the default tenant."""
+        self.assert_admin(context)
         # ensure that we're a member of that tenant
         tenant_id = user.get('tenantId')
         self.identity_api.add_user_to_tenant(context, tenant_id, user_id)
5438d3b5a219

Require authz to update user's tenant (bug 1040626)

https://github.com/openstack/keystoneDolph MathewsAug 23, 2012via ghsa
commit
1 file changed · +1 −0
  • keystone/identity/core.py+1 −0 modified
    @@ -436,6 +436,7 @@ def set_user_password(self, context, user_id, user):
 
     def update_user_tenant(self, context, user_id, user):
         """Update the default tenant."""
+        self.assert_admin(context)
         # ensure that we're a member of that tenant
         tenant_id = user.get('tenantId')
         self.identity_api.add_user_to_tenant(context, tenant_id, user_id)

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

15

News mentions

0

No linked articles in our index yet.