CVE-2012-5571 — Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the sources call it.

Remediation

Fixes and mitigations documented by the sources — linked to the original advisory.

• Documented patch — www.openwall.com (NIST National Vulnerability Database)
• Documented patch — www.openwall.com (NIST National Vulnerability Database)
• Documented patch — bugs.launchpad.net (NIST National Vulnerability Database)
• Documented patch — github.com (NIST National Vulnerability Database)
• Documented patch — github.com (NIST National Vulnerability Database)
• Documented patch — github.com (NIST National Vulnerability Database)
• Pip Keystone: fixed in version 8.0.0a0 — github.com (GitHub Security Advisories)

First 24 hours

Ordered from the record’s own fields — exposure first, because you cannot patch what you have not found. A rule-generated starting point.

1. Identify exposed assets running the affected vendor/product/version combinations (OpenStack Essex, OpenStack Folsom, Red Hat OpenStack Essex for RHEL 6…).
2. Apply the fixed version or the patch documented under Remediation.
3. Search available logs for exploit probes matching the vulnerability class (access control), errors and authentication anomalies.

Affected scope

Vendor, product and versions as the sources word them.

Attack characteristics

The CVSS vector, decoded. It describes the attack, not your exposure to it.

Every base score collected

Sources score independently and may disagree; each row says who scored it and under which version.

Weakness MITRE

Weakness class according to MITRE’s CWE catalog.

CWE-639 · Authorization Bypass Through User-Controlled Key (IDOR)

Other CVEs with this weakness →

Detection

Read off the CVSS vector and the weakness class. Starting points, not tested rules.

• Prioritize edge telemetry for the network-reachable component (proxy, WAF, IDS/IPS).
• Audit administrative actions and access to resources outside each user’s normal pattern.

Timeline

What happened to this CVE, newest first.

• 2026
• Fix documented
  Oct 30, 2026 · GitHub Security Advisories
• Affected products added · pip/keystone
  Oct 30, 2026 · GitHub Security Advisories
• Affected products added · red hat/openstack essex for rhel 6, red hat/openstack folsom for rhel 6, red hat/red hat openstack platform 13 (queens),
  Oct 30, 2026 · CVE Program (cve.org) e CISA ADP
• Record published
  Oct 30, 2026
• Fix documented
  Oct 30, 2026 · NIST National Vulnerability Database
• Affected products added · openstack/essex, openstack/folsom
  Oct 30, 2026 · NIST National Vulnerability Database
• CVSS changed · 5.4
  Oct 30, 2026 · NIST National Vulnerability Database
• Source status changed · → Modified
  Oct 30, 2026 · NIST National Vulnerability Database
• Record created in this database
  Oct 30, 2026 · Alertas do Telegram
• 2012
• CVE published
  Dec 17, 2012 · redhat

Source activity

Repeated readings are counted rather than listed.

• 2× References added · Oct 30, 2026 – Oct 30, 2026
• 1× Official description updated · Oct 30, 2026 – Oct 30, 2026

References

20 on the record

• secunia.com/advisories/51423
  Vendor Advisory, NIST National Vulnerability Database
• secunia.com/advisories/51436
  Vendor Advisory, NIST National Vulnerability Database
• www.openwall.com/lists/oss-security/2012/11/28/6
  Patch, NIST National Vulnerability Database
• github.com/openstack/keystone/commit/8735009dc5b895db265a1cd573f39f4acfca2a19
  Patch, NIST National Vulnerability Database
• github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b
  Patch, NIST National Vulnerability Database
• github.com/openstack/keystone/commit/9d68b40cb9ea818c48152e6c712ff41586ad9653
  Patch, NIST National Vulnerability Database
• www.openwall.com/lists/oss-security/2012/11/28/5
  Patch, NIST National Vulnerability Database
• bugs.launchpad.net/keystone/+bug/1064914
  Patch, NIST National Vulnerability Database
• github.com/advisories/GHSA-qvpr-qm6w-6rcc
  GitHub Security Advisories
• access.redhat.com/security/cve/CVE-2012-5571
  vdb-entry, x_refsource_REDHAT, NIST National Vulnerability Database
• lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
  NIST National Vulnerability Database
• rhn.redhat.com/errata/RHSA-2012-1556.html
  NIST National Vulnerability Database
• nvd.nist.gov/vuln/detail/CVE-2012-5571
  GitHub Security Advisories
• www.securityfocus.com/bid/56726
  NIST National Vulnerability Database
• access.redhat.com/errata/RHSA-2012:1556
  vendor-advisory, x_refsource_REDHAT, NIST National Vulnerability Database
• exchange.xforce.ibmcloud.com/vulnerabilities/80333
  NIST National Vulnerability Database
• www.ubuntu.com/usn/USN-1641-1
  NIST National Vulnerability Database
• github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2012-35.yaml
  GitHub Security Advisories
• access.redhat.com/errata/RHSA-2012:1557
  vendor-advisory, x_refsource_REDHAT, NIST National Vulnerability Database
• rhn.redhat.com/errata/RHSA-2012-1557.html
  NIST National Vulnerability Database

Elsewhere on this site

Related CVEs (same products)

• Medium CVE-2026-93010 Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check 2d
• Medium CVE-2026-93009 Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder 2d
• Medium CVE-2026-93008 Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations 2d
• Medium CVE-2026-93011 Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms 2d
• Medium CVE-2026-93006 Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content 2d
• Medium CVE-2026-93007 Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation 2d

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

• No CISA SSVC assessment.
• No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
• No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
• No exploit packet captures, log samples, or incident case IDs supplied.

Answered from this record

Text assembled only from the fields above — no additional claims.

What should defenders know first?

CVE-2012-5571 is "Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling", rated Medium. It affects Essex (OpenStack); versions are in the scope table. It is not in CISA KEV, which does not rule out exploitation. CVSS 5.4 describes technical severity. EPSS 2.06% estimates the probability of exploitation in 30 days; neither replaces your asset context. First verify whether exposed or business-critical assets run the affected versions, apply vendor fixes or mitigations, and preserve logs for review.

Comments

Moderated technical discussion. Read the community guidelines.

No comments yet.

Sign in or create an account to comment and suggest corrections.