VulnerabilityModified

CVE-2015-7546

HIGH 7.5EPSS 1.72%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers, which allows remote authenticated users to bypass intended access restrictions and gain access to cloud resources by manipulating byte fields within a revoked token.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.72% probability · 76th percentile
CISA KEV: Not listed
Weakness: CWE-522
Affected: openstack/keystonemiddleware · openstack/keystone · oracle/solaris
Source: secalert@redhat.com

References

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
http://www.securityfocus.com/bid/80498Third Party Advisory, VDB Entry
https://bugs.launchpad.net/keystone/+bug/1490804Issue Tracking, Third Party Advisory
https://security.openstack.org/ossa/OSSA-2016-005.htmlPatch, Vendor Advisory
https://wiki.openstack.org/wiki/OSSN/OSSN-0062Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
http://www.securityfocus.com/bid/80498Third Party Advisory, VDB Entry
https://bugs.launchpad.net/keystone/+bug/1490804Issue Tracking, Third Party Advisory
https://security.openstack.org/ossa/OSSA-2016-005.htmlPatch, Vendor Advisory
https://wiki.openstack.org/wiki/OSSN/OSSN-0062Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.