CVE-2012-5571
CVE-2012-5571 is a medium-severity vulnerability in Openstack Essex with a CVSS 3.x base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-639.
Key facts
- Severity: Medium (CVSS 3.x base score 5.4)
- CVSS v2: 3.5
- EPSS exploit prediction: 2% (79th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-639
- Affected product: Openstack Essex
- Published:
- Last modified:
Description
A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.
Frequently asked questions
- What is CVE-2012-5571?
- A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.
- How severe is CVE-2012-5571?
- CVE-2012-5571 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2012-5571 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2012-5571?
- CVE-2012-5571 primarily affects Openstack Essex. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2012-5571?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2012-5571 published?
- CVE-2012-5571 was published on 2012-12-18 and last updated on 2026-06-16.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
- http://rhn.redhat.com/errata/RHSA-2012-1556.html
- http://rhn.redhat.com/errata/RHSA-2012-1557.html
- http://secunia.com/advisories/51423
- http://secunia.com/advisories/51436
- http://www.openwall.com/lists/oss-security/2012/11/28/5
- http://www.openwall.com/lists/oss-security/2012/11/28/6
- http://www.securityfocus.com/bid/56726
- http://www.ubuntu.com/usn/USN-1641-1
- https://access.redhat.com/security/cve/CVE-2012-5571
- https://bugs.launchpad.net/keystone/+bug/1064914
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80333
- https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b
- https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19
- https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653
Affected products (2)
- cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*
- cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*
More vulnerabilities in Openstack Essex
- CVE-2013-0261 — High (CVSS 8.8): A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name…
- CVE-2013-0208 — Medium (CVSS 6.5): The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote…
- CVE-2013-0335 — Medium (CVSS 6.0): OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access…
- CVE-2013-0266 — Medium (CVSS 5.5): A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file…
- CVE-2012-5482 — Medium (CVSS 5.5): The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete…
- CVE-2012-4573 — Medium (CVSS 5.5): The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete…
All CVEs affecting Openstack Essex →
Other CWE-639 (Authorization Bypass Through User-Controlled Key (IDOR)) vulnerabilities
- CVE-2025-40805 — Critical (CVSS 10.0): Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an…
- CVE-2024-45032 — Critical (CVSS 10.0): A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge…
- CVE-2026-34037 — Critical (CVSS 9.9): Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to…
- CVE-2026-52782 — Critical (CVSS 9.9): OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through…
- CVE-2026-45552 — Critical (CVSS 9.9): Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior,…
- CVE-2026-29200 — Critical (CVSS 9.9): A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and…
Browse all CWE-639 (Authorization Bypass Through User-Controlled Key (IDOR)) vulnerabilities →