Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2020-12689

Improper Privilege Management

Published: May 07, 2020 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
8.8 IMPORTANT
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-12689
CWEhttps://cwe.mitre.org/data/definitions/269.html

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope (trust/oauth/application credential) can create an EC2 credential with an escalated permission, such as obtaining admin while the user is on a limited viewer role. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

NameVendorStart VersionEnd Version
KeystoneOpenstack*15.0.1 (excluding)
KeystoneOpenstack16.0.0 (including)16.0.0 (including)
Red Hat OpenStack Platform 10.0 (Newton)RedHatopenstack-keystone-1:10.0.3-8.el7ost*
Red Hat OpenStack Platform 13.0 (Queens)RedHatopenstack-keystone-1:13.0.4-3.el7ost*
Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.6 EUSRedHatopenstack-keystone-1:13.0.4-3.el7ost*
Red Hat OpenStack Platform 15.0 (Stein)RedHatopenstack-keystone-1:15.0.1-0.20200512110437.95b2bbe.el8ost*
Red Hat OpenStack Platform 16.0 (Train)RedHatopenstack-keystone-1:16.0.1-0.20200511063421.40cbb7b.el8ost*
KeystoneUbuntubionic*
KeystoneUbuntueoan*
KeystoneUbuntuesm-infra/bionic*
KeystoneUbuntuesm-infra/xenial*
KeystoneUbuntutrusty*
KeystoneUbuntuupstream*
KeystoneUbuntuxenial*

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use