CVE-2014-2237

2014-04-0106:35:00

Debian Security Bug Tracker

security-tracker.debian.org

0.003 Low

EPSS

Percentile

69.0%

JSON

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee’s token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.

OSVersionArchitecturePackageVersionFilename
Debian12allkeystone< 2013.2.3-1keystone_2013.2.3-1_all.deb
Debian11allkeystone< 2013.2.3-1keystone_2013.2.3-1_all.deb
Debian10allkeystone< 2013.2.3-1keystone_2013.2.3-1_all.deb
Debian999allkeystone< 2013.2.3-1keystone_2013.2.3-1_all.deb
Debian13allkeystone< 2013.2.3-1keystone_2013.2.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	keystone	< 2013.2.3-1	keystone_2013.2.3-1_all.deb
Debian	11	all	keystone	< 2013.2.3-1	keystone_2013.2.3-1_all.deb
Debian	10	all	keystone	< 2013.2.3-1	keystone_2013.2.3-1_all.deb
Debian	999	all	keystone	< 2013.2.3-1	keystone_2013.2.3-1_all.deb
Debian	13	all	keystone	< 2013.2.3-1	keystone_2013.2.3-1_all.deb

0.003 Low

EPSS

Percentile

69.0%

JSON

Related for DEBIANCVE:CVE-2014-2237