CVE

Id
64241  
CVE No.
CVE-2013-4294  
Status
Candidate  
Description
The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633686 64241 CVE-2013-4294 MLIST:[oss-security] 20130911 [OSSA 2013-025] Token revocation failure using Keystone memcache/KVS backends (CVE-2013-4294)  View
633687 64241 CVE-2013-4294 URL:http://seclists.org/oss-sec/2013/q3/586  View
633688 64241 CVE-2013-4294 CONFIRM:https://bugs.launchpad.net/keystone/+bug/1202952  View
633689 64241 CVE-2013-4294 REDHAT:RHSA-2013:1285  View
633690 64241 CVE-2013-4294 URL:http://rhn.redhat.com/errata/RHSA-2013-1285.html  View
633691 64241 CVE-2013-4294 UBUNTU:USN-2002-1  View
633692 64241 CVE-2013-4294 URL:http://www.ubuntu.com/usn/USN-2002-1  View
633693 64241 CVE-2013-4294 OSVDB:97237  View
633694 64241 CVE-2013-4294 URL:http://osvdb.org/97237  View
633695 64241 CVE-2013-4294 SECUNIA:54706  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23314 JVNDB-2013-004889 Linux Kernel の drivers/md/dm-snap-persistent.c における重要な情報を取得される脆弱性 Linux Kernel の drivers/md/dm-snap-persistent.c には、解釈の競合により、重要な情報を取得される、またはデータを変更される脆弱性が存在します。 CVE-2013-4299 64241 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004889.html  View