Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
openstack keystone 2014.1.2 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2014-5251
The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x prior to 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expi...
Openstack Keystone Juno-2
Openstack Keystone 2014.1
Canonical Ubuntu Linux 14.04
Openstack Keystone Juno-1
Openstack Keystone 2014.1.2
NA
CVE-2014-5252
The V3 API in OpenStack Identity (Keystone) 2014.1.x prior to 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request ...
Openstack Keystone 2014.1.2
Openstack Keystone Juno-2
Openstack Keystone 2014.1
Canonical Ubuntu Linux 14.04
Openstack Keystone Juno-1
NA
CVE-2014-5253
OpenStack Identity (Keystone) 2014.1.x prior to 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.
Openstack Keystone 2014.1.2
Canonical Ubuntu Linux 14.04
Openstack Keystone Juno-1
Openstack Keystone Juno-2
Openstack Keystone 2014.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started