Lucene search
+L

1276 matches found

Tenable Nessus
Tenable Nessus
added 2013/04/09 12:00 a.m.34 views

Fedora 18 : openstack-keystone-2012.2.3-5.fc18 (2013-4590)

Fix online revocation check for PKI tokens CVE-2013-1865 Add openssl dependency for PKI tokens Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

6.8CVSS5.3AI score0.0263EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2013/03/24 12:00 a.m.84 views

[USN-1772-1] OpenStack Keystone vulnerability

========================================================================== Ubuntu Security Notice USN-1772-1 March 20, 2013 keystone vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

6.8CVSS0.2AI score0.0263EPSS
SaveExploits0
NVD
NVD
added 2013/03/22 9:55 p.m.18 views

CVE-2013-1865

OpenStack Keystone Folsom 2012.2 does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token...

6.8CVSS6.5AI score0.0263EPSS
SaveExploits0References10
Prion
Prion
added 2013/03/22 9:55 p.m.23 views

Design/Logic Flaw

OpenStack Keystone Folsom 2012.2 does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token...

6.8CVSS7AI score0.0263EPSS
SaveExploits0References10Affected Software2
OSV
OSV
added 2013/03/22 9:55 p.m.11 views

PYSEC-2013-39

OpenStack Keystone Folsom 2012.2 does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token...

6.8CVSS6.4AI score0.0263EPSS
SaveExploits0References11
CVE
CVE
added 2013/03/22 9:00 p.m.84 views

CVE-2013-1865

CVE-2013-1865 affects OpenStack Keystone Folsom (2012.2). The vulnerability arises because revocation checks for Keystone PKI tokens are not performed when processed through a server, allowing remote attackers to bypass access restrictions using a revoked PKI token. The reported impact is partial...

6.8CVSS6.5AI score0.0263EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2013/03/22 9:00 p.m.42 views

CVE-2013-1865

OpenStack Keystone Folsom 2012.2 does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token...

6.3AI score0.0263EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2013/03/22 12:00 a.m.42 views

Ubuntu: Security Advisory (USN-1772-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.0263EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/03/22 12:00 a.m.36 views

Ubuntu Update for keystone USN-1772-1

Check for the Version of keystone OpenVAS Vulnerability Test $Id: gbubuntuUSN17721.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for keystone USN-1772-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

6.8CVSS6.4AI score0.0263EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/21 12:00 a.m.33 views

Ubuntu 12.10 : keystone vulnerability (USN-1772-1)

Guang Yee discovered that Keystone would not always perform all verification checks when configured to use PKI. If the keystone server was configured to use PKI and services or users requested online verification, an attacker could potentially exploit this to bypass revocation checks. Keystone us...

6.8CVSS5.4AI score0.0263EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2013/03/20 9:51 p.m.18 views

Cautious Optimism over Google DNSSEC Deployment

Google’s announcement that its Google Public DNS resolution service now supports DNSSEC is being applauded, but experts caution that despite Google’s high profile, this only puts a slight dent in a larger issue. “I think it’s great that Google is getting involved and supporting validation for...

6.9AI score
SaveExploits0
Ubuntu
Ubuntu
added 2013/03/20 8:48 p.m.66 views

USN-1772-1: OpenStack Keystone vulnerability

Guang Yee discovered that Keystone would not always perform all verification checks when configured to use PKI. If the keystone server was configured to use PKI and services or users requested online verification, an attacker could potentially exploit this to bypass revocation checks. Keystone us...

6.8CVSS5.3AI score0.0263EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2013/03/20 3:00 p.m.54 views

CVE-2013-1865

OpenStack Keystone Folsom 2012.2 does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token...

6.8CVSS5.9AI score0.0263EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/03/15 12:00 a.m.9 views

Fedora Update for ca-certificates FEDORA-2013-0231

Check for the Version of ca-certificates OpenVAS Vulnerability Test Fedora Update for ca-certificates FEDORA-2013-0231 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

7.4AI score
SaveExploits0References2
Fedora
Fedora
added 2013/03/12 8:55 a.m.14 views

[SECURITY] Fedora 17 Update: ca-certificates-2012.87-1.fc17

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

2.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2013/03/12 12:00 a.m.36 views

CentOS Update for pki-ca CESA-2013:0511 centos6

Check for the Version of pki-ca OpenVAS Vulnerability Test CentOS Update for pki-ca CESA-2013:0511 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

4.3CVSS6.4AI score0.01227EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/03/12 12:00 a.m.29 views

CentOS Update for pki-ca CESA-2013:0511 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS5.2AI score0.01227EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/10 12:00 a.m.24 views

CentOS 6 : pki-core (CESA-2013:0511)

Updated pki-core packages that fix multiple security issues, two bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

4.3CVSS5.2AI score0.01227EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2013/03/01 12:00 a.m.26 views

Scientific Linux Security Update : pki-core on SL6.x i386/x86_64 (20130221)

Note: The Certificate Authority component provided by this advisory cannot be used as a standalone server. It is installed and operates as a part of Identity Management the IPA component in Scientific Linux. Multiple cross-site scripting flaws were discovered in Certificate System. An attacker...

4.3CVSS5.2AI score0.01227EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2013/02/27 7:37 p.m.66 views

pki security update

CentOS Errata and Security Advisory CESA-2013:0511 Updated pki-core packages that fix multiple security issues, two bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A...

4.3CVSS5.6AI score0.01227EPSS
SaveExploits0References7
Rows per page
Query Builder