CVE-2012-4413

Description

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

Risk Information

Base Score

8.8

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.428

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2012-4413 are fixed in Python-keystone 2012.1.3	Windows
Vulnerabilities CVE-2012-4413 are fixed in Python-keystone for linux 2012.1.3	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234