Unscored severity · published Sep 23, 2013
CVE-2013-4294
The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with…
–
CVSS
2.7%
EPSS
No
On KEV
Description
The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keystone · Openstack
2012.2; 2012.2.1; 2012.2.2; 2012.2.3; 2012.2.4; 2013.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4294
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4294
osvdb.org
http://osvdb.org/97237
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-1285.html
Patch
http://seclists.org/oss-sec/2013/q3/586
secunia.com
http://secunia.com/advisories/54706
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2002-1
Vendor Advisory
https://bugs.launchpad.net/keystone/+bug/1202952
More from Keystone
8.8
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2020-12691
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0
8.8
CVE-2020-12690
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0