OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-08-25T14:00:00
Updated: 2024-08-06T11:41:48.330Z
Reserved: 2014-08-15T00:00:00
Link: CVE-2014-5253
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-08-25T14:55:07.113
Modified: 2024-11-21T02:11:42.250
Link: CVE-2014-5253
Redhat