PYSEC-2012-20
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/keystone/PYSEC-2012-20.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2012-20
- Aliases
-
- CVE-2012-5563
- GHSA-w66p-78g4-mr7g
- Published
- 2012-12-18T01:55:00Z
- Modified
- 2023-11-08T03:57:09.908738Z
- Summary
- [none]
- Details
-
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.
- References
-
- https://bugs.launchpad.net/keystone/+bug/1079216
- http://www.ubuntu.com/usn/USN-1641-1
- http://secunia.com/advisories/51436
- http://secunia.com/advisories/51423
- https://github.com/openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5
- https://github.com/openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681
- http://www.openwall.com/lists/oss-security/2012/11/28/5
- http://www.openwall.com/lists/oss-security/2012/11/28/6
- http://rhn.redhat.com/errata/RHSA-2012-1557.html
- http://www.securityfocus.com/bid/56727
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80370
Affected packages
PyPI / keystone
Package
- Name
- keystone
- View open source insights on deps.dev
- Purl
- pkg:pypi/keystone
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openstack/keystone
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
12.*
12.0.2
12.0.3
13.*
13.0.2
13.0.3
13.0.4
14.*
14.0.0
14.0.1
14.1.0
14.2.0
15.*
15.0.0.0rc1
15.0.0.0rc2
15.0.0
15.0.1
16.*
16.0.0.0rc1
16.0.0.0rc2
16.0.0
16.0.1
16.0.2
17.*
17.0.0.0rc1
17.0.0.0rc2
17.0.0
17.0.1
18.*
18.0.0.0rc1
18.0.0
18.1.0
19.*
19.0.0.0rc1
19.0.0.0rc2
19.0.0
19.0.1
20.*
20.0.0.0rc1
20.0.0
20.0.1
21.*
21.0.0.0rc1
21.0.0
21.0.1
22.*
22.0.0.0rc1
22.0.0
22.0.1
23.*
23.0.0.0rc1
23.0.0
23.0.1
24.*
24.0.0.0rc1
24.0.0