PT-2013-3441 · Openstack · Openstack Keystone
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
OpenStack Keystone version 2012.2
Description
The issue allows remote attackers to bypass intended access restrictions via a revoked PKI token, due to improper revocation checks for Keystone PKI tokens when performed through a server.
Recommendations
For OpenStack Keystone version 2012.2, update to a version that properly handles revocation checks for Keystone PKI tokens to prevent bypassing of access restrictions.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openstack Keystone