CVE-2013-2059

OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when…

published May 21, 2013

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02468 · 84.4th percentile
Published
2013-05-21T18:00Z
EPSS history
Timeline
  • 21 MAY 18:00Z
    OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when…
    cvelistv5