Ubuntu 12.04 LTS : keystone vulnerability (USN-1564-1)

Dolph Mathews discovered that when roles are granted and revoked to users in Keystone, pre-existing tokens were not updated or invalidated to take the new roles into account. An attacker could use this to continue to access resources that have been revoked. Note that Tenable Network Security has...