Skip to content
OpenAdvisories
Medium RHSA-2012:1557 1 CVE

Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 2 openstack:2::el6 openstack-keystone 0:2012.2.1-1.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-keystone-doc 0:2012.2.1-1.el6ost
Red Hat · OpenStack 2 openstack:2::el6 python-keystone 0:2012.2.1-1.el6ost

Vulnerabilities 1

  • Medium 5.9
    CVE-2012-5563

    OpenStack Keystone Insufficient token expiration

    OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists …

    keystone PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=879402
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=880399
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=883829
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1557.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-5563
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-5563
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-5563