| Package | Affected versions | Patched versions |
|---|---|---|
| keystone | < 8.0.0a0 | 8.0.0a0 |
| keystone | = 2012.2≥ 2012.1, < 2012.1.2 | 2012.1.2 |
OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, which allows remote authenticated users to access the tenant's resources by requesting a token for the tenant.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free