tocsin

Debian/keystone: unknown

OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass int

Action: Upgrade keystone to 2012.1.1-1 or later.

Affected

introducedfixedlast affected
02012.1.1-1-

Fixed versions

2012.1.1-1

Sources

published · modified · JSON