The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Heat | Openstack | * | 2013.2 (including) |