CVE-2012-4457

OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote…

published October 9, 2012

CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02286 · 82.9th percentile
Published
2012-10-09T15:00Z
EPSS history
Timeline
  • 09 OCT 15:00Z
    OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote…
    cvelistv5