https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:25:34.557163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-6391 CVE-2013-6391 2026-10-03T12:25:34.571896+00:00

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.