OpenStack Keystone 2014.1
Approved changes feed: RSS · Atom
cpe:2.3:a:openstack:keystone:2014.1:*:*:*:*:*:*:*
part: a version: 2014.1 update: *
| Vendor | Openstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a) |
|---|---|
| Product | Keystone (54be5cb9-7f0d-5cc5-bfca-6220fcd705e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/keystone |
purl2cpe | 2026-06-01 10:17:03.366079 |
pkg:deb/ubuntu/keystone |
purl2cpe | 2026-06-01 10:17:03.366080 |
pkg:github/openstack/keystone |
purl2cpe | 2026-06-01 10:17:03.366081 |
pkg:pypi/keystone |
purl2cpe | 2026-06-01 10:17:03.366083 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5253 |
vulnerable | 2026-06-03 14:34:05.812948 |
Details available
OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.
Published: 2014-08-25T14:00:00.000Z
Updated: 2024-08-06T11:41:48.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5252 |
vulnerable | 2026-06-03 14:34:05.812518 |
Details available
The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.
Published: 2014-08-25T14:00:00.000Z
Updated: 2024-08-06T11:41:47.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5251 |
vulnerable | 2026-06-03 14:34:05.810483 |
Details available
The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.
Published: 2014-08-25T14:00:00.000Z
Updated: 2024-08-06T11:41:47.701Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.