Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/keystone@2012.1.1-1?distro=trixie
purl pkg:deb/debian/keystone@2012.1.1-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-swvg-7jxy-p3cg OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens through token chaining, (2) leveraging possession of a token for a disabled user account, or (3) leveraging possession of a token for an account with a changed password. CVE-2012-3426
GHSA-xp97-6w7r-4cjc
PYSEC-2012-34

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:59:02.215341+00:00 Debian Importer Fixing VCID-swvg-7jxy-p3cg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-12T17:49:26.086550+00:00 Debian Importer Fixing VCID-swvg-7jxy-p3cg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:28:01.766703+00:00 Debian Importer Fixing VCID-swvg-7jxy-p3cg https://security-tracker.debian.org/tracker/data/json 38.1.0