CVE ID:	CVE-2013-2059
Description:	OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via the token.
Test IDs:	1.3.6.1.4.1.25623.1.0.841431
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2059 53326 http://secunia.com/advisories/53326 53339 http://secunia.com/advisories/53339 59787 http://www.securityfocus.com/bid/59787 93134 http://osvdb.org/93134 FEDORA-2013-8023 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html FEDORA-2013-8048 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html [oss-security] 20130509 RE: [Openstack] [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) http://www.openwall.com/lists/oss-security/2013/05/09/4 [oss-security] 20130509 [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) http://www.openwall.com/lists/oss-security/2013/05/09/3 https://bugs.launchpad.net/keystone/+bug/1166670 https://bugs.launchpad.net/keystone/+bug/1166670 keystone-cve20132059-security-bypass(84135) https://exchange.xforce.ibmcloud.com/vulnerabilities/84135 openSUSE-SU-2013:0949 http://lists.opensuse.org/opensuse-updates/2013-06/msg00085.html