{"identifier":"CVE-2012-5571","cve":{"id":"CVE-2012-5571","description":"A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role has been removed from a tenant. An attacker can leverage a token associated with a removed user role to gain unauthorized access.","published":"2012-12-18T01:55:03.570000+00:00","modified":"2026-10-30T19:17:25.990000+00:00","status":"Modified","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss_version":"3.1","affected":[{"criteria":"cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""},{"criteria":"cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*","versionStartIncluding":"","versionStartExcluding":"","versionEndIncluding":"","versionEndExcluding":""}],"weaknesses":["CWE-255","CWE-639"],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1556.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1557.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/51423","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51436","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/11/28/5","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2012/11/28/6","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/56726","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1641-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2012:1556","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2012:1557","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2012-5571","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/keystone/+bug/1064914","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80333","source":"secalert@redhat.com"},{"url":"https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1557.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/51423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/11/28/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2012/11/28/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/56726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1641-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/keystone/+bug/1064914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}],"kev":null,"kev_checked":true,"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:essex:2012.1:*:*:*:*:*:*:*","matchCriteriaId":"E5FDB43F-B315-4F68-9D86-B644F2D4DF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*","matchCriteriaId":"E76B76AB-D744-4163-8615-7BA18ABB1347"}]}]}],"source":"nvd","retrieved_at":"2026-10-30T21:57:38.498375+00:00","exploited":false,"kev_stale":false,"products":["openstack / essex","openstack / folsom"],"priority":{"label":"Assess exposure and vendor guidance","reasons":["No higher-priority signal is available in the current stored evidence.","Fresh EPSS data is unavailable; missing values are not zero."]},"epss":null,"version_assessment":null},"news":[],"campaigns":[],"domains":[{"domain":"lists.fedoraproject.org","source_url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html","investigate_url":"https://investigate.aeglixmind.com/#lists.fedoraproject.org"},{"domain":"rhn.redhat.com","source_url":"http://rhn.redhat.com/errata/RHSA-2012-1556.html","investigate_url":"https://investigate.aeglixmind.com/#rhn.redhat.com"},{"domain":"secunia.com","source_url":"http://secunia.com/advisories/51423","investigate_url":"https://investigate.aeglixmind.com/#secunia.com"},{"domain":"www.openwall.com","source_url":"http://www.openwall.com/lists/oss-security/2012/11/28/5","investigate_url":"https://investigate.aeglixmind.com/#www.openwall.com"},{"domain":"www.securityfocus.com","source_url":"http://www.securityfocus.com/bid/56726","investigate_url":"https://investigate.aeglixmind.com/#www.securityfocus.com"},{"domain":"www.ubuntu.com","source_url":"http://www.ubuntu.com/usn/USN-1641-1","investigate_url":"https://investigate.aeglixmind.com/#www.ubuntu.com"},{"domain":"access.redhat.com","source_url":"https://access.redhat.com/errata/RHSA-2012:1556","investigate_url":"https://investigate.aeglixmind.com/#access.redhat.com"},{"domain":"bugs.launchpad.net","source_url":"https://bugs.launchpad.net/keystone/+bug/1064914","investigate_url":"https://investigate.aeglixmind.com/#bugs.launchpad.net"},{"domain":"exchange.xforce.ibmcloud.com","source_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80333","investigate_url":"https://investigate.aeglixmind.com/#exchange.xforce.ibmcloud.com"},{"domain":"github.com","source_url":"https://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b","investigate_url":"https://investigate.aeglixmind.com/#github.com"}],"arsenal_url":"https://arsenal.aeglixmind.com/?cve=CVE-2012-5571","catalog_url":"https://cves.aeglixmind.com/cve/CVE-2012-5571","research_url":"https://investigate.aeglixmind.com/research/cve/CVE-2012-5571","coverage":{"news_candidates_checked":0,"campaign_candidates_checked":0,"bounded":false,"notice":"Exact CVE mentions in stored public excerpts and reviewed campaign content only. A mention is not proof of exploitation, attribution or tool suitability. Missing matches do not establish absence."}}