CVE-2013-1865
Fixed in a distro release EPSS 3%
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
Products: openstack folsom, canonical ubuntu_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | keystone | 2012.2.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 2 | openstack-keystone | 0:2012.2.3-7.el6ost |
| Red Hat openstack 2 | openstack-keystone-doc | 0:2012.2.3-7.el6ost |
| Red Hat openstack 2 | python-keystone | 0:2012.2.3-7.el6ost |