Keystone@2013.1.2 Security Vulnerabilities and Issues — Keystone@2013.1.2 CVE List

Lucene search

OpenstackKeystone2013.1.2

3 matches found

CVE•added 2013/09/23 8:55 p.m.•59 views

CVE-2013-4294

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.

5CVSS6.4AI score0.008EPSS

CVE•added 2014/04/15 2:55 p.m.•49 views

CVE-2014-2828

The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."

7.8CVSS6.6AI score0.00864EPSS

CVE•added 2014/04/01 6:35 a.m.•44 views

CVE-2014-2237

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being in...

5CVSS6.2AI score0.00256EPSS