Skip to content
OpenAdvisories
Medium RHSA-2013:1285 1 CVE

Red Hat Security Advisory: openstack-keystone security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-keystone 0:2013.1.3-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-keystone-doc 0:2013.1.3-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 python-keystone 0:2013.1.3-2.el6ost

Vulnerabilities 1

  • Medium 5.3
    CVE-2013-4294

    OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token

    The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions…

    keystone keystone Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1004452
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1285.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4294
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4294
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4294