CVE:CVE-2012-3426
CNNVD:CNNVD-201207-583
OpenStack Keystone 2012.1.1之前版本中存在多个安全绕过漏洞。已认证的攻击者可利用该漏洞绕过某些目地安全限制并获取对账户的扩展访问。
solution:Upgrade openstack essex to a higher version than *; Upgrade openstack horizon to a higher version than folsom-1,and avoid the version folsom-1; Upgrade openstack keystone to a higher version than 2012.1,2012.1.1,and avoid the version 2012.1,2012.1.1