{"api_version":"1","generated_at":"2026-07-23T01:26:45+00:00","cve":"CVE-2012-5563","urls":{"html":"https://cve.report/CVE-2012-5563","api":"https://cve.report/api/cve/CVE-2012-5563.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-5563","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-5563"},"summary":{"title":"CVE-2012-5563","description":"OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining.  NOTE: this issue exists because of a CVE-2012-3426 regression.","state":"PUBLISHED","assigner":"redhat","published_at":"2012-12-18 01:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-255","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/56727","name":"http://www.securityfocus.com/bid/56727","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OpenStack Token Expiration Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.openwall.com/lists/oss-security/2012/11/28/6","name":"http://www.openwall.com/lists/oss-security/2012/11/28/6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-security - [OSSA 2012-019] Extension of token validity through token chaining\n (CVE-2012-5563)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681","name":"https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ensure token expiration is maintained ·  f9d4766 · openstack/keystone · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/51436","name":"http://secunia.com/advisories/51436","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA51436 - Ubuntu update for keystone - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/11/28/5","name":"http://www.openwall.com/lists/oss-security/2012/11/28/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"oss-security - [OSSA 2012-018] EC2-style credentials invalidation issue (CVE-2012-5571)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1557.html","name":"http://rhn.redhat.com/errata/RHSA-2012-1557.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://bugs.launchpad.net/keystone/+bug/1079216","name":"https://bugs.launchpad.net/keystone/+bug/1079216","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug #1079216 “[OSSA-2012-019] token expires time incorrect for a...” : Bugs : Keystone","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/51423","name":"http://secunia.com/advisories/51423","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-1641-1","name":"http://www.ubuntu.com/usn/USN-1641-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-1641-1: OpenStack Keystone vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5","name":"https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ensure token expiration is maintained (bug 1079216) ·  38c7e46 · openstack/keystone · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80370","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80370","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5563","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5563","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"5563","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"openstack","cpe5":"folsom","cpe6":"2012.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:14:15.420Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"RHSA-2012:1557","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2012-1557.html"},{"name":"[oss-security] 20121128 [OSSA 2012-018] EC2-style credentials invalidation issue (CVE-2012-5571)","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/11/28/5"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5"},{"name":"56727","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/56727"},{"name":"USN-1641-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-1641-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681"},{"name":"[oss-security] 20121128 [OSSA 2012-019] Extension of token validity through token chaining (CVE-2012-5563)","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/11/28/6"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugs.launchpad.net/keystone/+bug/1079216"},{"name":"51423","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/51423"},{"name":"folsom-tokens-security-bypass(80370)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80370"},{"name":"51436","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/51436"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-11-28T00:00:00.000Z","descriptions":[{"lang":"en","value":"OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining.  NOTE: this issue exists because of a CVE-2012-3426 regression."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"RHSA-2012:1557","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2012-1557.html"},{"name":"[oss-security] 20121128 [OSSA 2012-018] EC2-style credentials invalidation issue (CVE-2012-5571)","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/11/28/5"},{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5"},{"name":"56727","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/56727"},{"name":"USN-1641-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-1641-1"},{"tags":["x_refsource_CONFIRM"],"url":"https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681"},{"name":"[oss-security] 20121128 [OSSA 2012-019] Extension of token validity through token chaining (CVE-2012-5563)","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/11/28/6"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugs.launchpad.net/keystone/+bug/1079216"},{"name":"51423","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/51423"},{"name":"folsom-tokens-security-bypass(80370)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80370"},{"name":"51436","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/51436"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2012-5563","datePublished":"2012-12-18T01:00:00.000Z","dateReserved":"2012-10-24T00:00:00.000Z","dateUpdated":"2024-08-06T21:14:15.420Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-12-18 01:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-255","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*","matchCriteriaId":"E76B76AB-D744-4163-8615-7BA18ABB1347"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"5563","Ordinal":"1","Title":"CVE-2012-5563","CVE":"CVE-2012-5563","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"5563","Ordinal":"1","NoteData":"OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining.  NOTE: this issue exists because of a CVE-2012-3426 regression.","Type":"Description","Title":"CVE-2012-5563"},{"CveYear":"2012","CveId":"5563","Ordinal":"2","NoteData":"2012-12-17","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"5563","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}