OpenStack Keystone Token Revocation Failure Security Bypass Vulnerability
BID:62331
Info
OpenStack Keystone Token Revocation Failure Security Bypass Vulnerability
| Bugtraq ID: | 62331 |
| Class: | Design Error |
| CVE: |
CVE-2013-4294 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 11 2013 12:00AM |
| Updated: | Oct 25 2013 12:12AM |
| Credit: | Kieran Spear |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
OpenStack Keystone Token Revocation Failure Security Bypass Vulnerability
Keystone is prone to a security-bypass vulnerability.
Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and perform unauthorized actions which may aid in launching further attacks.
Keystone (Folsom and Grizzly) is affected.
Keystone is prone to a security-bypass vulnerability.
Successful exploits may allow authenticated attackers to bypass certain intended security restrictions and perform unauthorized actions which may aid in launching further attacks.
Keystone (Folsom and Grizzly) is affected.
Exploit / POC
OpenStack Keystone Token Revocation Failure Security Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
OpenStack Keystone Token Revocation Failure Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenStack Keystone Token Revocation Failure Security Bypass Vulnerability
References:
References: