Lucene search
RedhatCVELIST:CVE-2013-6391HistoryDec 14, 2013 - 5:00 p.m.
CVE-2013-6391
2013-12-1417:00:00
redhat
www.cve.org
2
The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.
References
Related
ubuntu
ubuntu
OpenStack Keystone vulnerability
2013-12-19 00:00:00
debiancve
debiancve
CVE-2013-6391
2013-12-14 17:21:46
openvas
openvas
Ubuntu: Security Advisory (USN-2061-1)
2013-12-23 00:00:00
Ubuntu Update for keystone USN-2061-1
2013-12-23 00:00:00
Fedora Update for openstack-keystone FEDORA-2013-23589
2014-02-03 00:00:00
seebug
seebug
OpenStack Keystone EC2-style什ηζ ‘ιͺηΉζζεζΌζ΄
2013-12-16 00:00:00
securityvulns
securityvulns
[USN-2061-1] OpenStack Keystone vulnerability
2013-12-23 00:00:00
OpenStack multiple security vulnerabilities
2013-12-23 00:00:00
redhat
redhat
(RHSA-2014:0089) Moderate: openstack-keystone security and bug fix update
2014-01-22 00:00:00
(RHSA-2014:0368) Moderate: openstack-keystone security update
2014-04-03 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-12-14 17:21:00
ubuntucve
ubuntucve
CVE-2013-6391
2013-12-11 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 08:55:33
nvd
nvd
CVE-2013-6391
2013-12-14 17:21:46
nessus
nessus
Ubuntu 13.10 : keystone vulnerability (USN-2061-1)
2013-12-20 00:00:00
Fedora 19 : openstack-keystone-2013.1.5-2.fc19 (2014-4210)
2014-04-07 00:00:00
RHEL 6 : openstack-keystone (RHSA-2014:0368)
2024-04-24 00:00:00
cve
cve
CVE-2013-6391
2013-12-14 17:21:46
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-keystone-2013.2.1-1.fc20
2013-12-28 23:38:12
[SECURITY] Fedora 20 Update: openstack-keystone-2013.2.3-2.fc20
2014-04-17 06:00:52
[SECURITY] Fedora 19 Update: openstack-keystone-2013.1.5-2.fc19
2014-04-05 04:54:55