Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-4413
4
MEDIUMCVSS v2
Published
September 18, 2012
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.
openstack/keystone
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.= 2012.1.3, < 2012.1.3NVD