CVE ID:	CVE-2012-4413
Description:	OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.
Test IDs:	1.3.6.1.4.1.25623.1.0.72193   1.3.6.1.4.1.25623.1.0.841142
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4413 50531 http://secunia.com/advisories/50531 50590 http://secunia.com/advisories/50590 55524 http://www.securityfocus.com/bid/55524 85484 http://osvdb.org/85484 USN-1564-1 http://www.ubuntu.com/usn/USN-1564-1 [oss-security] 20120912 [OSSA 2012-014] Revoking a role does not affect existing tokens (CVE-2012-4413) http://www.openwall.com/lists/oss-security/2012/09/12/7 keystone-roles-sec-bypass(78478) https://exchange.xforce.ibmcloud.com/vulnerabilities/78478