CVE-2014-5253

Published: Aug 25, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugs.launchpad.net/keystone/+bug/1349597

x_refsource_MISC

RHSA-2014:1121

vendor-advisory

x_refsource_REDHAT

RHSA-2014:1122

vendor-advisory

x_refsource_REDHAT

USN-2324-1

vendor-advisory

x_refsource_UBUNTU

[oss-security] 20140815 [OSSA 2014-026] Multiple vulnerabilities in Keystone revocation events (CVE-2014-5251, CVE-2014-5252, CVE-2014-5253)

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-5253

Description

Affected Products

References