Lucene search
Ubuntu.comUB:CVE-2012-5563HistoryNov 28, 2012 - 12:00 a.m.
CVE-2012-5563
2012-11-2800:00:00
ubuntu.com
ubuntu.com
11
0.002 Low
EPSS
Percentile
58.1%
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly
implement token expiration, which allows remote authenticated users to
bypass intended authorization restrictions by creating new tokens through
token chaining. NOTE: this issue exists because of a CVE-2012-3426
regression.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | Folsom+ only 2013.1~g2-0ubuntu1 is affected. Server team will provide this as part of their regular updates for Ubuntu 13.04 (deferring for now) |
Related
github
github
OpenStack Keystone Insufficient token expiration
2022-05-17 01:39:21
OpenStack Keystone token expiration issues
2022-05-17 05:23:24
osv
osv
OpenStack Keystone Insufficient token expiration
2022-05-17 01:39:21
OpenStack Keystone token expiration issues
2022-05-17 05:23:24
prion
prion
Authorization
2012-12-18 01:55:00
Authorization
2012-07-31 10:45:00
debiancve
debiancve
CVE-2012-5563
2012-12-18 01:55:00
CVE-2012-3426
2012-07-31 10:45:00
cve
cve
CVE-2012-5563
2012-12-18 01:55:00
CVE-2012-3426
2012-07-31 10:45:00
cvelist
cvelist
CVE-2012-5563
2012-12-18 01:00:00
CVE-2012-3426
2012-07-31 10:00:00
securityvulns
securityvulns
[USN-1641-1] OpenStack Keystone vulnerabilities
2012-12-10 00:00:00
OpenStack security vulnerabilities
2012-12-10 00:00:00
OpenStack Keystone limitations bypass
2012-09-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1641-1)
2012-11-29 00:00:00
Ubuntu Update for keystone USN-1641-1
2012-11-29 00:00:00
Ubuntu: Security Advisory (USN-1552-1)
2012-09-04 00:00:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 : keystone vulnerabilities (USN-1641-1)
2012-11-29 00:00:00
Fedora 18 : openstack-keystone-2012.2.1-1.fc18 (2012-19584)
2012-12-11 00:00:00
Ubuntu 12.04 LTS : keystone vulnerabilities (USN-1552-1)
2012-09-04 00:00:00
ubuntu
ubuntu
OpenStack Keystone vulnerabilities
2012-11-28 00:00:00
OpenStack Keystone vulnerabilities
2012-09-03 00:00:00
veracode
veracode
Authentication Bypass
2019-01-15 08:51:20
ubuntucve
ubuntucve
CVE-2012-3426
2012-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: openstack-keystone-2012.2.1-1.fc18
2012-12-11 05:57:09
[SECURITY] Fedora 17 Update: openstack-keystone-2012.1.2-4.fc17
2012-10-03 23:54:46
[SECURITY] Fedora 17 Update: openstack-keystone-2012.1.3-3.fc17
2012-12-11 01:27:24
redhat
redhat