Unscored severity · published Sep 18, 2012
CVE-2012-4413
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked…
–
CVSS
1.9%
EPSS
No
On KEV
Description
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keystone · Openstack
2012.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4413
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4413
osvdb.org
http://osvdb.org/85484
Vendor Advisory
http://secunia.com/advisories/50531
Vendor Advisory
http://secunia.com/advisories/50590
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/09/12/7
www.securityfocus.com
http://www.securityfocus.com/bid/55524
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1564-1
More from Keystone
8.8
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2020-12691
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0
8.8
CVE-2020-12690
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0