CVE-2013-4294
First published: Wed Sep 04 2013(Updated: )
The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenStack Keystone | =2012.2 | |
| OpenStack Keystone | =2012.2.1 | |
| OpenStack Keystone | =2012.2.2 | |
| OpenStack Keystone | =2012.2.3 | |
| OpenStack Keystone | =2012.2.4 | |
| OpenStack Keystone | =2013.1 | |
| OpenStack Keystone | =2013.1.1 | |
| OpenStack Keystone | =2013.1.2 | |
| OpenStack Keystone | =2013.1.3 | |
| pip/keystone | >=2012.2.0<2013.1.4 | 2013.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/97237
- http://rhn.redhat.com/errata/RHSA-2013-1285.html
- http://seclists.org/oss-sec/2013/q3/586
- http://secunia.com/advisories/54706
- http://www.ubuntu.com/usn/USN-2002-1
- https://bugs.launchpad.net/keystone/+bug/1202952
- https://nvd.nist.gov/vuln/detail/CVE-2013-4294
- https://access.redhat.com/errata/RHSA-2013:1285
- https://access.redhat.com/security/cve/CVE-2013-4294
- https://bugzilla.redhat.com/show_bug.cgi?id=1004452
- https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2013-42.yaml
- https://github.com/advisories/GHSA-5qpp-v56f-mqfm (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=793753&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=793753&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=793754&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=793754&action=edit
- http://www.openwall.com/lists/oss-security/2013/09/11/5
- https://rhn.redhat.com/errata/RHSA-2013-1285.html
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-4294
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-5qpp-v56f-mqfm
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- collector/github-advisory
- collector/nvd-cve
- source/NVD
- agent/author
- agent/tags
- agent/trending
- vendor/openstack
- canonical/openstack keystone
- version/openstack keystone/2012.2
- version/openstack keystone/2012.2.1
- version/openstack keystone/2012.2.2
- version/openstack keystone/2012.2.3
- version/openstack keystone/2012.2.4
- version/openstack keystone/2013.1
- version/openstack keystone/2013.1.1
- version/openstack keystone/2013.1.2
- version/openstack keystone/2013.1.3
- package-manager/pip