Red Hat Security AdvisoryRHSA-2013:0708
openstack-keystone security and bug fix update
Released 2013-04-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenStack Folsom openstack-keystone-2012.2.3-7.el6ost, openstack-keystone-doc-2012.2.3-7.el6ost, python-keystone-2012.2.3-7.el6ost
Fixes 2 records
Priority LOW 35
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI to…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0263 · Published 2013-03-22 · Fixed in 2012.2.4 CWE-287
Priority LOW 35
A flaw was found in OpenStack Keystone.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03165 · Published 2013-04-12 · Partial fix · 2012.2.3-7.el6ost, 8.0.0a0 CWE-1284
