Red Hat Security Advisory

RHSA-2013:1285

openstack-keystone security update

Released 2013-09-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-keystone-2013.1.3-2.el6ost, openstack-keystone-doc-2013.1.3-2.el6ost, python-keystone-2013.1.3-2.el6ost

Fixes 1 record

TI-2013-03760 CVE-2013-4294 · GHSA-5qpp-v56f-mqfm

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom…

LOW 28

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02696 Published 2013-09-23 Partial fix · 2013.1.4 CWE-264