PT-2013-3522
CVE-2013-2059
·
تاريخ النشر
2013-05-21
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
OpenStack Identity (Keystone) versions Folsom 2012.2.4 and earlier
OpenStack Identity (Keystone) versions Grizzly before 2013.1.1
Description
The issue allows remote authenticated users to retain access via an authentication token even after a user is deleted through the Keystone v2 API.
Recommendations
For OpenStack Identity (Keystone) versions Folsom 2012.2.4 and earlier, update to a version later than 2012.2.4 to ensure authentication tokens are properly revoked when a user is deleted.
For OpenStack Identity (Keystone) versions Grizzly before 2013.1.1, update to version 2013.1.1 or later to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾