5.5
CVE-2013-2104
- EPSS 2.06%
- Veröffentlicht 21.01.2014 18:55:09
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
Loginpython-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Python-keystoneclient Version <= 0.2.3
Openstack ≫ Python-keystoneclient Version0.2.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.06% | 0.789 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 8 | 4.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:P
|
http://lists.opensuse.org/opensuse-updates/2013-06/msg00198.html
http://rhn.redhat.com/errata/RHSA-2013-0944.html
http://www.openwall.com/lists/oss-security/2013/05/28/7
http://www.ubuntu.com/usn/USN-1851-1
http://www.ubuntu.com/usn/USN-1875-1
https://bugs.launchpad.net/python-keystoneclient/+bug/1179615