CVE-2013-1865
OpenStack Keystone Improper Authentication vulnerability
CVE-2013-1865 is a medium vulnerability (CVSS 6.8) in Openstack Folsom, published March 22, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.63%, the 85th percentile. Fixed in keystone 2012.2.4.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.63%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2012.2.4keystone +3 more
Description
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
keystonePyPI | 2012.2 up to 2012.2.4 | 2012.2.4 |
openstack-keystoneRed Hat:openstack:2::el6 From an advisory covering 2 CVEs | before 0:2012.2.3-7.el6ost | 0:2012.2.3-7.el6ost |
openstack-keystone-docRed Hat:openstack:2::el6 From an advisory covering 2 CVEs | before 0:2012.2.3-7.el6ost | 0:2012.2.3-7.el6ost |
python-keystoneRed Hat:openstack:2::el6 From an advisory covering 2 CVEs | before 0:2012.2.3-7.el6ost | 0:2012.2.3-7.el6ost |
What each source reports
NVD Score used
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- Record
CVE-2013-1865- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE ListNo score
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- Record
CVE-2013-1865- Updated
- 2026-11-02
EUVDEUVD-2013-0014No score
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- Record
EUVD-2013-0014- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22q6-wwq7-2jj9
OpenStack Keystone Improper Authentication vulnerability
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- Record
GHSA-22q6-wwq7-2jj9- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
OSVGHSA-22q6-wwq7-2jj9
OpenStack Keystone Improper Authentication vulnerability
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- Record
GHSA-22q6-wwq7-2jj9- CVSS 4.0
- 6.9 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
OSVRHSA-2013:0708
Red Hat Security Advisory: openstack-keystone security and bug fix update
- Record
RHSA-2013:0708- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVPYSEC-2013-39No score
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions via a revoked PKI token.
- Record
PYSEC-2013-39- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2013/03/20/13
secunia.com/advisories/52657
lists.opensuse.org/opensuse-updates/2013-04/msg00000.html
lists.fedoraproject.org/pipermail/package-announce/2013-April/101719.html
bugs.launchpad.net/keystone/+bug/1129713
review.openstack.org
Show 29 moreShow less
securityfocus.com/bid/58616
ubuntu.com/usn/USN-1772-1
osvdb.org/91532
rhn.redhat.com/errata/RHSA-2013-0708.html
nvd.nist.gov/vuln/detail/CVE-2013-1865
access.redhat.com/errata/RHSA-2013:0708
bugzilla.redhat.com/show_bug.cgi?id=922230
web.archive.org/web/20170715155558/http://www.securityfocus.com/bid/58616
github.com/openstack/keystone/commit/255b1d43500f5d98ec73a0056525b492b14fec05
opendev.org/openstack/keystone
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0708.json
cve.org/CVERecord?id=CVE-2013-0270
launchpad.net/keystone/grizzly/2013.1