Auth bypass in Openstack Folsom

CVE-2013-1865

OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.

Vulnerability class: Broken Authentication

EPSS: 0.026 (83.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References