CVE-2012-4413

Опубликовано: 12 сент. 2012

Источник: redhat

CVSS2: 4

Описание

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-613

https://bugzilla.redhat.com/show_bug.cgi?id=855491OpenStack-Keystone: role revocation token issues

4 Medium

CVSS2

Связанные уязвимости

CVE-2012-4413

ubuntu

больше 13 лет назад

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

CVE-2012-4413

nvd

больше 13 лет назад

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

CVE-2012-4413

debian

больше 13 лет назад

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when g ...

GHSA-mrxv-65rv-6hxq

github

больше 3 лет назад

OpenStack Keystone does not invalidate existing tokens when granting or revoking roles

4 Medium

CVSS2