OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-09-18T17:00:00

Updated: 2024-08-06T20:35:09.517Z

Reserved: 2012-08-21T00:00:00

Link: CVE-2012-4413

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-09-18T17:55:07.960

Modified: 2024-11-21T01:42:49.933

Link: CVE-2012-4413

cve-icon Redhat

Severity : Moderate

Publid Date: 2012-09-12T00:00:00Z

Links: CVE-2012-4413 - Bugzilla