PYSEC-2014-69

2014-01-2118:55:00

Google

osv.dev

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

JSON

python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.

CPENameOperatorVersion
python-keystoneclienteq0.2.2
python-keystoneclienteq0.1.2
python-keystoneclienteq0.1.1
python-keystoneclienteq0.2.3
python-keystoneclienteq0.2.0
python-keystoneclienteq0.1.3
python-keystoneclienteq0.2.1

Name	Operator	Version
python-keystoneclient	eq	0.2.2
python-keystoneclient	eq	0.1.2
python-keystoneclient	eq	0.1.1
python-keystoneclient	eq	0.2.3
python-keystoneclient	eq	0.2.0
python-keystoneclient	eq	0.1.3
python-keystoneclient	eq	0.2.1