CVE-2013-1865
No CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days. Fixed in keystone 2012.2.4.
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- openstack:folsom
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-22q6-wwq7-2jj9 | PyPI | keystone | >=2012.2 <2012.2.4 | 2012.2.4 |
| PYSEC-2013-39 | PyPI | keystone | >=2012.2 <2012.2.4 | 2012.2.4 |