Oval Definition:oval:org.mitre.oval:def:18049
Revision Date:2014-06-30Version:8
Title:USN-1564-1 -- keystone vulnerability
Description:OpenStack Keystone did not properly handle user role changes Software Description: - keystone: OpenStack identity service Details: Dolph Mathews discovered that when roles are granted and revoked to users in Keystone, pre-existing tokens were not updated or invalidated to take the new roles into account.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2012-4413
USN-1564-1
Platform(s):Ubuntu 12.04
Product(s):keystone
Definition Synopsis
  • Ubuntu 12.04 is installed
  • AND Packages match section
  • keystone DPKG is earlier than 2012.1+stable~20120824-a16a0ab9-0ubuntu2.2
  • OR python-keystone DPKG is earlier than 2012.1+stable~20120824-a16a0ab9-0ubuntu2.2
  • BACK