OpenStack Security Advisory

  1. Bug #1324592
  2. Comment #2

Comment 2 for bug 1324592

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: Trust scope can be circumvented by chaining trusts

The OSSA task is incomplete pending additional details from security reviewers, keystone-coresec are now subscribed to the bug.

It does sounds like a practical privilege escalation, shouldn't we raise the priority ?