NVD

Id
39867  
Name
CVE-2013-4222  
Description
OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-09-30  
Modified Date
2013-12-08  
Seq
2013-4222  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202758 39867 CVE-2013-4222 FEDORA-2013-16551  View
202759 39867 CVE-2013-4222 RHSA-2013:1524  View
202760 39867 CVE-2013-4222 USN-2002-1  View
202761 39867 CVE-2013-4222 https://bugs.launchpad.net/ossn/+bug/1179955  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22850 JVNDB-2013-004425 複数の OpenStack 製品におけるアクセスを保持される脆弱性 OpenStack Identity (Keystone) Folsom、Grizzly、および Havana は、テナントが無効になっている場合、ユーザトークンを適切に失効しないため、アクセスを保持される脆弱性が存在します。 CVE-2013-4222 64164 CVE-2013-4222 39867 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004425.html 2013-06-03 2013-12-26 View