Red Hat Security Advisory

RHSA-2013:1524

openstack-keystone security and bug fix update

Released 2013-11-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-keystone-2013.1.4-1.el6ost, openstack-keystone-doc-2013.1.4-1.el6ost, python-keystone-2013.1.4-1.el6ost

Fixes 1 record

TI-2013-03694 CVE-2013-4222 · GHSA-g99j-vfcp-3vmf

OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before…

LOW 33

OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01892 Published 2013-09-30 Partial fix CWE-522