CVE-2012-5563

Published December 18th, 2012

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.

openstack/keystone

OpenStack Identity (Keystone). Mirror of code maintained at opendev.org.

GitHub

712