Skip to content
OpenAdvisories

Archive

23 September 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3

    OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token

    The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions…

  • Medium 6.2
    CVE-2013-2217 Public exploit

    Improper Link Resolution Before File Access in Suds

    cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.