CVE-2012-5563 in Folsom

Sumário (Inglês)

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

24/10/2012

Divulgação

17/12/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
63195	OpenStack Folsom Authorization Elevação de Privilégios	255	Não definido	Correção oficial	CVE-2012-5563

Fontes

• MITRE
• NVD
• CVE Details