CVE-2012-5563
2 advisories.
PyPI/keystone CVE-2012-5563: medium 5.9, EPSS 2.86%
OpenStack Keystone Insufficient token expiration
Action: Upgrade keystone to 8.0.0 or later.
pip install keystone==8.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.0.0 | - |
Fixed versions
| 8.0.0 |
Sources
- osv: GHSA-w66p-78g4-mr7g
- https://nvd.nist.gov/vuln/detail/CVE-2012-5563
- https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5
- https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681
- https://bugs.launchpad.net/keystone/+bug/1079216
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80370
- https://github.com/openstack/keystone
- https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2012-20.yaml
- https://web.archive.org/web/20121201003009/http://secunia.com/advisories/51423
- https://web.archive.org/web/20140802122732/http://secunia.com/advisories/51436
- https://web.archive.org/web/20200228144943/http://www.securityfocus.com/bid/56727
- http://rhn.redhat.com/errata/RHSA-2012-1557.html
- http://www.openwall.com/lists/oss-security/2012/11/28/5
- http://www.openwall.com/lists/oss-security/2012/11/28/6
- http://www.ubuntu.com/usn/USN-1641-1
CVE-2012-5563 · published · modified · JSON
PyPI/keystone CVE-2012-5563: unknown, EPSS 2.86%
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2012-20
- https://bugs.launchpad.net/keystone/+bug/1079216
- http://www.ubuntu.com/usn/USN-1641-1
- http://secunia.com/advisories/51436
- http://secunia.com/advisories/51423
- https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5
- https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681
- http://www.openwall.com/lists/oss-security/2012/11/28/5
- http://www.openwall.com/lists/oss-security/2012/11/28/6
- http://rhn.redhat.com/errata/RHSA-2012-1557.html
- http://www.securityfocus.com/bid/56727
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80370
- https://github.com/advisories/GHSA-w66p-78g4-mr7g
CVE-2012-5563 · published · modified · JSON