CVE-2016-4911

—

CVSS 3.1

4.3 medium

EPSS

1%p71

Published

Jun 13, 2016 (Jun 13, 2016)

Modified

Jun 17, 2026

Description

The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token.

Vendors: keystone
Products: openstack identity
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.