CVE-2013-4294
openstack keystone: no CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days. Fixed in keystone 2013.1.4.
The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:keystone
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5qpp-v56f-mqfm | PyPI | keystone | >=2012.2.0 <2013.1.4 | 2013.1.4 |
| PYSEC-2013-42 | PyPI | keystone | >=2012.2.0 <2013.1.4 | 2013.1.4 |