{"action":"Upgrade keystone to 8.0.0a0 or later.","affected":[{"fixed":"8.0.0a0","introduced":"0"}],"component":"keystone","cve_ids":["CVE-2013-2059"],"ecosystem":"PyPI","epss":0.02468,"exploited":false,"fixed_versions":["8.0.0a0"],"ghsa_id":"GHSA-hj89-qmx9-8qmh","id":"tcs_01M5KG5WT1ZPC7YMTMS4BFH46T","modified_at":"2024-11-25T22:42:12.635766Z","published_at":"2013-05-21T18:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-41","https://bugs.launchpad.net/keystone/+bug/1166670","http://osvdb.org/93134","http://secunia.com/advisories/53326","http://secunia.com/advisories/53339","http://www.openwall.com/lists/oss-security/2013/05/09/3","http://www.securityfocus.com/bid/59787","http://www.openwall.com/lists/oss-security/2013/05/09/4","http://lists.opensuse.org/opensuse-updates/2013-06/msg00085.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html","https://exchange.xforce.ibmcloud.com/vulnerabilities/84135"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-41","url":"https://osv.dev/vulnerability/PYSEC-2013-41"}],"summary":"OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, wh"}