{"action":"Upgrade keystone to 2013.2-2 or later.","affected":[{"fixed":"2013.2-2","introduced":"0"}],"component":"keystone","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2013.2-2"],"id":"tcs_01M5NAHGHCQ9YAXVT6SET7KCEV","modified_at":"2026-09-01T20:03:18.338794367Z","published_at":"2013-11-02T19:55:04.773Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-4477","https://security-tracker.debian.org/tracker/CVE-2013-4477"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-4477#Debian:14/keystone","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-4477"}],"summary":"The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to ga"}