Lucene search

K
cvelistMitreCVELIST:CVE-2014-2237
HistoryApr 01, 2014 - 1:00 a.m.

CVE-2014-2237

2014-04-0101:00:00
mitre
www.cve.org
1

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.2%

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trusteeโ€™s token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.2%