OpenStack Token Expiration Security Bypass Vulnerability
BID:56727
Info
OpenStack Token Expiration Security Bypass Vulnerability
| Bugtraq ID: | 56727 |
| Class: | Design Error |
| CVE: |
CVE-2012-5563 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 28 2012 12:00AM |
| Updated: | May 07 2015 05:11PM |
| Credit: | Anndy |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Redhat OpenStack Folsom 0 Redhat OpenStack Essex 0 OpenStack OpenStack 2012.2 (Folsom) |
| Not Vulnerable: | |
Discussion
OpenStack Token Expiration Security Bypass Vulnerability
OpenStack is prone to a security-bypass vulnerability.
Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and gain extended access to the account.
OpenStack 2012.2 (Folsom) is affected; other versions may also be vulnerable.
Note: This issue is related to BID 54709 (OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities).
OpenStack is prone to a security-bypass vulnerability.
Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and gain extended access to the account.
OpenStack 2012.2 (Folsom) is affected; other versions may also be vulnerable.
Note: This issue is related to BID 54709 (OpenStack Keystone Token Expiration Multiple Security Bypass Vulnerabilities).
Exploit / POC
OpenStack Token Expiration Security Bypass Vulnerability
This issue is trivial to exploit. An attacker needs to have an authorized account on the application.
This issue is trivial to exploit. An attacker needs to have an authorized account on the application.
References
OpenStack Token Expiration Security Bypass Vulnerability
References:
References: