| Package | Affected versions | Patched versions |
|---|---|---|
| keystone | ≥ 2013.1, ≤ 2013.1.3 | |
| openstack | = 3.0 |
OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3 does not properly revoke user tokens when a tenant is disabled, which allows remote authenticated users to retain access via the token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free