{"action":"Upgrade keystone to 8.0.0a0 or later.","affected":[{"fixed":"8.0.0a0","introduced":"0"}],"component":"keystone","cve_ids":["CVE-2012-3426"],"ecosystem":"PyPI","epss":0.02285,"exploited":false,"fixed_versions":["8.0.0a0"],"ghsa_id":"GHSA-xp97-6w7r-4cjc","id":"tcs_01M5KG4FR2EBK2KG4QE7T78PC2","modified_at":"2024-11-22T17:53:36Z","published_at":"2022-05-17T05:23:24Z","references":["https://osv.dev/vulnerability/GHSA-xp97-6w7r-4cjc","https://nvd.nist.gov/vuln/detail/CVE-2012-3426","https://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb18ee6a355","https://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c728ccb8626","https://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0279256f5d","https://bugs.launchpad.net/keystone/+bug/996595","https://bugs.launchpad.net/keystone/+bug/997194","https://bugs.launchpad.net/keystone/+bug/998185","https://github.com/openstack/keystone","https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2012-34.yaml","https://launchpad.net/keystone/essex/2012.1.1/+download/keystone-2012.1.1.tar.gz","http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b32354558391826a4aa","http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb18ee6a355","http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c728ccb8626","http://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0279256f5d","http://github.com/openstack/keystone/commit/d9600434da14976463a0bd03abd8e0309f0db454","http://github.com/openstack/keystone/commit/ea03d05ed5de0c015042876100d37a6a14bf56de","http://www.openwall.com/lists/oss-security/2012/07/27/4","http://www.ubuntu.com/usn/USN-1552-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xp97-6w7r-4cjc","url":"https://osv.dev/vulnerability/GHSA-xp97-6w7r-4cjc"}],"summary":"OpenStack Keystone token expiration issues"}