CVE-2016-4911

The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token.

• CWE-284

• http://www.openwall.com/lists/oss-security/2016/05/17/10Mailing List
• http://www.openwall.com/lists/oss-security/2016/05/17/11Mailing List
• http://www.securityfocus.com/bid/90728Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/keystone/+bug/1577558Vendor Advisory
• https://review.openstack.org/#/c/311886/Vendor Advisory
• https://security.openstack.org/ossa/OSSA-2016-008.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/05/17/10Mailing List
• http://www.openwall.com/lists/oss-security/2016/05/17/11Mailing List
• http://www.securityfocus.com/bid/90728Third Party Advisory, VDB Entry
• https://bugs.launchpad.net/keystone/+bug/1577558Vendor Advisory
• https://review.openstack.org/#/c/311886/Vendor Advisory
• https://security.openstack.org/ossa/OSSA-2016-008.htmlPatch, Vendor Advisory

Published

Jun 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-4905SQL injection vulnerability in the WP-OliveCart versions pri…
• CVE-2016-4906Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to…
• CVE-2016-4907Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtai…
• CVE-2016-4908Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated att…
• CVE-2016-4909Cross-site request forgery (CSRF) vulnerability in Cybozu Ga…
• CVE-2016-4910Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated att…
• CVE-2016-4912The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 al…
• CVE-2016-4913The get_rock_ridge_filename function in fs/isofs/rock.c in t…7.8
• CVE-2016-4921By flooding a Juniper Networks router running Junos OS with …7.5
• CVE-2016-4922Certain combinations of Junos OS CLI commands and arguments …8.4
• CVE-2016-4923Insufficient cross site scripting protection in J-Web compon…8
• CVE-2016-4924An incorrect permissions vulnerability in Juniper Networks J…8.4