CVE-2013-1865
CVE-2013-1865
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
CVSS 5.3 · Medium · EPSS 2.6% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
Original sources
- http://www.openwall.com/lists/oss-security/2013/03/20/13
- http://secunia.com/advisories/52657
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00000.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101719.html
- https://bugs.launchpad.net/keystone/+bug/1129713
- https://review.openstack.org/#/c/24906/
- http://www.securityfocus.com/bid/58616
- http://www.ubuntu.com/usn/USN-1772-1
- http://osvdb.org/91532
- http://rhn.redhat.com/errata/RHSA-2013-0708.html
- https://nvd.nist.gov/vuln/detail/CVE-2013-1865