Security Advisory

CVE-2013-6428

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-12-14 17:00:00

Last updated 2024-08-06 17:39:01

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.

← Browse all CVEs View on cve.org ↗