6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.
osvdb.org/85484
secunia.com/advisories/50531
secunia.com/advisories/50590
www.openwall.com/lists/oss-security/2012/09/12/7
www.securityfocus.com/bid/55524
www.ubuntu.com/usn/USN-1564-1
exchange.xforce.ibmcloud.com/vulnerabilities/78478