PyPI/keystone CVE-2012-5563: unknown, EPSS 2.86%
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2012-20
- https://bugs.launchpad.net/keystone/+bug/1079216
- http://www.ubuntu.com/usn/USN-1641-1
- http://secunia.com/advisories/51436
- http://secunia.com/advisories/51423
- https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5
- https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681
- http://www.openwall.com/lists/oss-security/2012/11/28/5
- http://www.openwall.com/lists/oss-security/2012/11/28/6
- http://rhn.redhat.com/errata/RHSA-2012-1557.html
- http://www.securityfocus.com/bid/56727
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80370
- https://github.com/advisories/GHSA-w66p-78g4-mr7g
CVE-2012-5563 · published · modified · JSON