https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:05:18.819058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2012-4413 CVE-2012-4413 2026-10-15T12:05:18.820747+00:00

OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

 https://cve.radiocsirt.org/vuln/ghsa-mrxv-65rv-6hxq GHSA-mrxv-65rv-6hxq — OpenStack Keystone does not invalidate existing tokens when granting or revoking roles 2026-10-15T12:05:18.820791+00:00

Affected: PyPI: keystone

OpenStack Keystone before 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.