{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"keystone","cve_ids":["CVE-2012-5563"],"ecosystem":"PyPI","epss":0.02864,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w66p-78g4-mr7g","id":"tcs_01M5KG5NBFERCJFZ5KQG1CQTME","modified_at":"2026-06-10T17:01:22.545627531Z","published_at":"2012-12-18T01:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2012-20","https://bugs.launchpad.net/keystone/+bug/1079216","http://www.ubuntu.com/usn/USN-1641-1","http://secunia.com/advisories/51436","http://secunia.com/advisories/51423","https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5","https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681","http://www.openwall.com/lists/oss-security/2012/11/28/5","http://www.openwall.com/lists/oss-security/2012/11/28/6","http://rhn.redhat.com/errata/RHSA-2012-1557.html","http://www.securityfocus.com/bid/56727","https://exchange.xforce.ibmcloud.com/vulnerabilities/80370","https://github.com/advisories/GHSA-w66p-78g4-mr7g"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2012-20","url":"https://osv.dev/vulnerability/PYSEC-2012-20"}],"summary":"OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating"}