Test ID:	1.3.6.1.4.1.25623.1.0.841431
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1830-1)
Summary:	The remote host is missing an update for the 'keystone' package(s) announced via the USN-1830-1 advisory.
Description:	Summary: The remote host is missing an update for the 'keystone' package(s) announced via the USN-1830-1 advisory. Vulnerability Insight: Sam Stoelinga discovered that Keystone would not immediately invalidate tokens when deleting users via the v2 API. A deleted user would be able to continue to use resources until the token lifetime expired. Affected Software/OS: 'keystone' package(s) on Ubuntu 12.04, Ubuntu 12.10, Ubuntu 13.04. Solution: Please install the updated package(s). CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2059 53326 http://secunia.com/advisories/53326 53339 http://secunia.com/advisories/53339 59787 http://www.securityfocus.com/bid/59787 93134 http://osvdb.org/93134 FEDORA-2013-8023 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106220.html FEDORA-2013-8048 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html [oss-security] 20130509 RE: [Openstack] [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) http://www.openwall.com/lists/oss-security/2013/05/09/4 [oss-security] 20130509 [OSSA 2013-011] Keystone tokens not immediately invalidated when user is deleted (CVE-2013-2059) http://www.openwall.com/lists/oss-security/2013/05/09/3 https://bugs.launchpad.net/keystone/+bug/1166670 keystone-cve20132059-security-bypass(84135) https://exchange.xforce.ibmcloud.com/vulnerabilities/84135 openSUSE-SU-2013:0949 http://lists.opensuse.org/opensuse-updates/2013-06/msg00085.html
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.