Security Advisory

CVE-2013-4294

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-09-23 20:00:00

Last updated 2024-08-06 16:38:01

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.

← Browse all CVEs View on cve.org ↗