Oval Definition:oval:com.ubuntu.precise:def:20132104000
Revision Date:2014-01-21Version:1
Title:CVE-2013-2104 on Ubuntu 12.04 LTS (precise) - medium.
Description:python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2013-2104
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'keystone' package in precise is not affected (note: 'code-not-present').
  • OR NOT While related to the CVE in some way, the 'python-keystoneclient' package in precise is not affected.
    • BACK