CVE-2013-0282
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
CVE-2013-0282 is a medium vulnerability (CVSS 5.0) in Openstack Keystone, published April 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in keystone 8.0.0a0.
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
Exploit likelihood
What each source reports
NVD Score used
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
CVE-2013-0282- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
CVE-2013-0282- Updated
- 2026-11-02
EUVDEUVD-2022-3144 No score
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
EUVD-2022-3144- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8833-qrvm-wc3h No score
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
GHSA-8833-qrvm-wc3h- Weakness
- CWE-287
- Updated
- 2026-11-02
OSV No score
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
CVE-2013-0282- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-0282 No score
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
DEBIAN-CVE-2013-0282- Updated
- 2026-11-02
OSVGHSA-8833-qrvm-wc3h No score
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
GHSA-8833-qrvm-wc3h- Weakness
- CWE-287
- Updated
- 2026-11-02
OSVPYSEC-2026-652 No score
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dependent attackers to bypass access restrictions.
- Record
PYSEC-2026-652- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
keystonePyPI |
before 8.0.0a0 | 8.0.0a0 |
keystoneDebian:12 |
before 2012.1.1-13 | 2012.1.1-13 |
keystoneDebian:13 |
before 2012.1.1-13 | 2012.1.1-13 |
keystoneDebian:14 |
before 2012.1.1-13 | 2012.1.1-13 |
openstack-keystoneRed Hat:openstack:2::el6 |
before 0:2012.2.3-3.el6ost | 0:2012.2.3-3.el6ost |
openstack-keystone-docRed Hat:openstack:2::el6 |
before 0:2012.2.3-3.el6ost | 0:2012.2.3-3.el6ost |
python-keystoneRed Hat:openstack:2::el6 |
before 0:2012.2.3-3.el6ost | 0:2012.2.3-3.el6ost |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugs.launchpad.net/keystone/+bug/1121494
review.openstack.org
openwall.com/lists/oss-security/2013/02/19/3
launchpad.net/keystone/grizzly/2013.1
nvd.nist.gov/vuln/detail/CVE-2013-0282
Show 22 moreShow less
github.com/openstack/keystone/commit/7402f5ef994599653bdbb3ed5ff1a2b8c3e72b9f
security-tracker.debian.org/tracker/CVE-2013-0282
pypi.org/project/keystone
access.redhat.com/errata/RHSA-2013:0596
bugzilla.redhat.com/show_bug.cgi?id=908995
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0596.json
cve.org/CVERecord?id=CVE-2013-0282
lists.openstack.org/pipermail/openstack-announce/2013-February/000079.html