Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-5563

17
FAUCET Score

CVE-2012-5563 describes a flaw in OpenStack Keystone (Folsom 2012.2) where token expiration is improperly handled, allowing authenticated users to bypass authorization by chaining tokens. This vulnerability has a CVSS score of 4.0 (medium severity), indicating a network-based attack with low complexity requiring authentication, leading to a potential impact on integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
2012.2CPE matchmatch criteria
cpe:2.3:a:openstack:folsom:2012.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.0MEDIUM

AV:N/AC:L/Au:S/C:N/I:P/A:N

Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
2.84%
Probability of exploitation in next 30 days
EPSS Percentile
85.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0284 is in the 95th percentile among its peer group of 21,939 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

pippatch availablevia ghsa
Product: keystoneFixed in: 8.0.0
redhatpatch availablevia redhat_api
Product: OpenStack Folsom for RHEL 6Fixed in: openstack-keystone-0:2012.2.1-1.el6ost
View patch

Vendor Advisories (2)

pipGHSA-w66p-78g4-mr7ghigh

OpenStack Keystone Insufficient token expiration

May 17, 2022
redhatCVE-2012-5563Moderate

OpenStack: Keystone extension of token validity through token chaining

Nov 28, 2012

References

rhn.redhat.com / errata/RHSA-2012-1557.html
bugs.launchpad.net / keystone/+bug/1079216
secunia.com / advisories/51423
Vendor Advisory
secunia.com / advisories/51436
Vendor Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/80370
github.com / openstack/keystone/commit/38c7e46a640a94da4da89a39a5a1ea9c081f1eb5
github.com / openstack/keystone/commit/f9d4766249a72d8f88d75dcf1575b28dd3496681
openwall.com / lists/oss-security/2012/11/28/5
Patch
openwall.com / lists/oss-security/2012/11/28/6
Patch
securityfocus.com / bid/56727
ubuntu.com / usn/USN-1641-1