CVE-2012-5563

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass…

published December 18, 2012

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02864 · 86.7th percentile
Published
2012-12-18T01:00Z
EPSS history
Timeline
  • 18 DEC 01:00Z
    OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass…
    cvelistv5