CVE-2013-2104
python-keystoneclient < 0.2.4 - Authenticated Token Expiry Bypass
Title source: llmDescription
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.
References (6)
Core 6
Core References
Issue Tracking x_refsource_confirm
https://bugs.launchpad.net/python-keystoneclient/+bug/1179615
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/05/28/7
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1851-1
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0944.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-06/msg00198.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1875-1
Scores
EPSS
0.0065
EPSS Percentile
71.1%
Details
CWE
CWE-264
Status
published
Products (3)
openstack/python-keystoneclient
0.2.2
openstack/python-keystoneclient
< 0.2.3
pypi/python-keystoneclient
0 - 0.2.4PyPI
Published
Jan 21, 2014
Tracked Since
Feb 18, 2026