CVE-2013-2059
CVE-2013-2059
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.
CVSS 4.3 · Medium · EPSS 2.5% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
keystone Debian:12
- Affected ranges
- ECOSYSTEM: < 2013.1.1-2
Update to 2013.1.1-2
keystone Debian:13
- Affected ranges
- ECOSYSTEM: < 2013.1.1-2
Update to 2013.1.1-2
keystone Debian:14
- Affected ranges
- ECOSYSTEM: < 2013.1.1-2
Update to 2013.1.1-2
keystone PyPI
- Affected ranges
- ECOSYSTEM: < 8.0.0a0
Update to 8.0.0a0
Original sources
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00085.html
- http://osvdb.org/93134
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html
- http://secunia.com/advisories/53326
- http://www.openwall.com/lists/oss-security/2013/05/09/3
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84135
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html
- https://bugs.launchpad.net/keystone/+bug/1166670
- http://secunia.com/advisories/53339
- http://www.securityfocus.com/bid/59787
- http://www.openwall.com/lists/oss-security/2013/05/09/4
- https://nvd.nist.gov/vuln/detail/CVE-2013-2059