| Package | Affected versions | Patched versions |
|---|---|---|
| heat | ≤ 2013.2 |
The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote authenticated users to bypass the tenant scoping restrictions via a modified tenant_id in the request path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free