[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpQWxwRqsFrFdxAHWysiWHkaq4BMUWauv_XOr2hEJjfo":3,"g5a-risk:CVE-2012-4456":170},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":116,"weaknesses":117,"weaknessesCount":126,"isActivelyExploited":127,"cisaInfo":15,"otxData":15,"relatedBlogPosts":128,"seoMetadata":129,"configurations":154,"relatedVendorCves":166,"notableEvents":167},"CVE-2012-4456","What is CVE-2012-4456?","The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrary services.","The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, w...","2012-10-09T15:55:01.173","2025-04-11T00:51:21.963",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.03998,[29,29,29,29,29,29,29],"High",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"openstack","keystone","*","cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":39,"criteria":40,"vulnerable":4},"2012.2","cpe:2.3:a:openstack:keystone:2012.2:milestone1:*:*:*:*:*:*",2,[43,49,55,60,64,67,72,76,80,83,86,89,92,94,96,98,100,102,104,106,108,110,112,114],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F50665","Secunia",[47,48],"Third Party Advisory","Vendor Advisory",{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2012\u002F09\u002F28\u002F5","Openwall",[53,54,47],"Mailing List","Patch",{"url":56,"source":57,"tags":58},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F55716","Securityfocus",[47,59],"VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fbugs.launchpad.net\u002Fkeystone\u002F+bug\u002F1006815","Launchpad",[47],{"url":65,"source":62,"tags":66},"https:\u002F\u002Fbugs.launchpad.net\u002Fkeystone\u002F+bug\u002F1006822",[54,47],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=861179","Red Hat",[71,47],"Issue Tracking",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F78944","Ibmcloud",[47,59],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F14b136aed9d988f5a8f3e699bd4577c9b874d6c1","GitHub",[47],{"url":81,"source":78,"tags":82},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F1d146f5c32e58a73a677d308370f147a3271c2cb",[47],{"url":84,"source":78,"tags":85},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F24df3adb3f50cbb5ada411bc67aba8a781e6a431",[47],{"url":87,"source":78,"tags":88},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F868054992faa45d6f42d822bf1588cb88d7c9ccb",[47],{"url":90,"source":62,"tags":91},"https:\u002F\u002Flists.launchpad.net\u002Fopenstack\u002Fmsg17034.html",[54,47],{"url":44,"source":45,"tags":93},[47,48],{"url":50,"source":51,"tags":95},[53,54,47],{"url":56,"source":57,"tags":97},[47,59],{"url":61,"source":62,"tags":99},[47],{"url":65,"source":62,"tags":101},[54,47],{"url":68,"source":69,"tags":103},[71,47],{"url":73,"source":74,"tags":105},[47,59],{"url":77,"source":78,"tags":107},[47],{"url":81,"source":78,"tags":109},[47],{"url":84,"source":78,"tags":111},[47],{"url":87,"source":78,"tags":113},[47],{"url":90,"source":62,"tags":115},[54,47],24,[118],{"id":119,"name":120,"description":121,"extendedDescription":122,"status":123,"abstraction":124,"structure":125},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":130,"metaDescription":131,"keywords":132,"canonicalUrl":133,"structuredData":134},"What is CVE-2012-4456? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-4456, a high severity cyber security vulnerability from 2012. The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack K...","CVE-2012-4456, CVE-2012-4456 vulnerability, CVE-2012-4456 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, openstack security, keystone vulnerability","\u002Fwhat-is\u002Fcve-2012-4456",{"@context":135,"@type":136,"headline":130,"description":131,"datePublished":10,"dateModified":11,"author":137,"publisher":141,"about":145,"mainEntityOfPage":149,"articleSection":152,"keywords":153},"https:\u002F\u002Fschema.org","TechArticle",{"@type":138,"name":139,"url":140},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":138,"name":139,"url":140,"logo":142},{"@type":143,"url":144},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":146,"name":6,"description":147,"additionalType":148},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":150,"@id":151},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-4456","Cybersecurity","CVE-2012-4456, CVE-2012-4456 vulnerability, CVE-2012-4456 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[155],{"Operator":15,"Negate":15,"Nodes":156},[157],{"Operator":158,"Negate":15,"CPEMatch":159},"OR",[160,164],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":162,"VersionEndExcluding":163,"VersionEndIncluding":15},"C7C2AEDF-D70D-4AA0-9E4F-A0DEEBDE7AB0","2012.1","2012.1.2",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F6F8A1A4-0A9E-4741-927C-120BF9151B81",[],[],{"lastModified":11,"cacheTime":169,"version":21},1792265369690,{"score":171,"band":172,"action":173,"scoredAt":174},46,"Medium","Plan remediation","2026-10-17T06:39:07.977688+00:00"]