← voltar
CVE-2013-2059

CVE-2013-2059

EPSS 2.5%
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00085.htmlhttp://osvdb.org/93134https://bugs.launchpad.net/keystone/+bug/1166670http://secunia.com/advisories/53326http://secunia.com/advisories/53339https://exchange.xforce.ibmcloud.com/vulnerabilities/84135http://www.openwall.com/lists/oss-security/2013/05/09/3http://www.openwall.com/lists/oss-security/2013/05/09/4http://www.securityfocus.com/bid/59787