Security Advisory

CVE-2014-5251

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-08-25 14:00:00
Last updated 2024-08-06 11:41:47
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.