openstack-keystone: incorrect token revocation
| Package(s): | openstack-keystone | CVE #(s): | CVE-2013-4294 | ||||||||||||
| Created: | September 26, 2013 | Updated: | November 8, 2013 | ||||||||||||
| Description: | From the Red Hat advisory: It was found that Keystone did not correctly handle revoked PKI tokens, allowing users with revoked tokens to retain access to resources they should no longer be able to access. This issue only affected systems using PKI tokens with the memcache or KVS token back ends. | ||||||||||||||
| Alerts: |
| ||||||||||||||