NVD

Id
38172  
Name
CVE-2013-2059  
Description
OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-05-21  
Modified Date
2014-05-05  
Seq
2013-2059  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195128 38172 CVE-2013-2059 FEDORA-2013-8048  View
195129 38172 CVE-2013-2059 FEDORA-2013-8023  View
195130 38172 CVE-2013-2059 openSUSE-SU-2013:0949  View
195131 38172 CVE-2013-2059 [oss-security] 20130509 [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059)  View
195132 38172 CVE-2013-2059 [oss-security] 20130509 RE: [Openstack] [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059)  View
195133 38172 CVE-2013-2059 59787  View
195134 38172 CVE-2013-2059 keystone-cve20132059-security-bypass(84135)  View
195135 38172 CVE-2013-2059 https://bugs.launchpad.net/keystone/+bug/1166670  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21202 JVNDB-2013-002777 複数の OpenStack 製品におけるアクセスを保持される脆弱性 OpenStack Identity (Keystone) Folsom、Grizzly、および Havana は、Keystone v2 API を介してユーザを削除する場合、認証トークンをすぐに失効しないため、アクセスを保持される脆弱性が存在します。 CVE-2013-2059 62001 CVE-2013-2059 38172 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002777.html 2013-04-25 2013-11-28 View