CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
77.1%
The (1) mamcache and (2) KVS token backends in OpenStack Identity
(Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly
compare the PKI token revocation list with PKI tokens, which allow remote
attackers to bypass intended access restrictions via a revoked PKI token.