CVE-2013-2104

MEDIUM · CVSS 5.5 EPSS 2.06%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-01-21 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-2104

Severity

MEDIUM

CVSS

5.5

EPSS

2.06%

Original NVD Description

python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.