6.1 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.