CVE-2013-4294

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-23 · updated 2026-06-16
Weakness: CWE-264

Description

The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.

Affected products

OpenStack Keystone: 2012.2, 2012.2.1, 2012.2.2, 2012.2.3, 2012.2.4, 2013.1 (+3)

References

http://osvdb.org/97237
http://rhn.redhat.com/errata/RHSA-2013-1285.html
http://seclists.org/oss-sec/2013/q3/586
http://secunia.com/advisories/54706
http://www.ubuntu.com/usn/USN-2002-1
https://bugs.launchpad.net/keystone/+bug/1202952
http://osvdb.org/97237
http://rhn.redhat.com/errata/RHSA-2013-1285.html
http://seclists.org/oss-sec/2013/q3/586
http://secunia.com/advisories/54706
http://www.ubuntu.com/usn/USN-2002-1
https://bugs.launchpad.net/keystone/+bug/1202952

Get alerted when CVE-2013-4294 or the next vulnerability affects your stack