Lucene search
Veracode Vulnerability DatabaseVERACODE:5572HistoryDec 13, 2017 - 6:41 a.m.
Authorization Bypass
2017-12-1306:41:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.002
Percentile
59.1%
python-keystoneclient is vulnerable to authorization bypass via token reuse. The vulnerability exists as authorization tokens were not invalidated when it was supposed to.
References
www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
www.securityfocus.com/bid/80498
bugs.launchpad.net/keystone/+bug/1490804
github.com/openstack/python-keystoneclient/commit/cb7863235025a48741128dcd387a3d307ab3a666
security.openstack.org/ossa/OSSA-2016-005.html
wiki.openstack.org/wiki/OSSN/OSSN-0062
Related
debiancve
debiancve
CVE-2015-7546
2016-02-03 18:59:04
cve
cve
CVE-2015-7546
2016-02-03 18:59:04
ubuntucve
ubuntucve
CVE-2015-7546
2016-02-03 00:00:00
nessus
nessus
RHEL 6 : openstack-keystone (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : openstack-keystone (Unpatched Vulnerability)
2024-06-03 00:00:00
osv
osv
PYSEC-2016-20
2016-02-03 18:59:00
nvd
nvd
CVE-2015-7546
2016-02-03 18:59:04
prion
prion
Authorization
2016-02-03 18:59:00
cvelist
cvelist
CVE-2015-7546
2016-02-03 15:00:00
github
github
