[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpQWxwRqsFrFdxAHWysiWHkaq4BMUWauv_XOr2hEJjfo":3,"g5a-risk:CVE-2012-4456":173},{"success":4,"data":5,"meta":171},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":46,"references":47,"referencesCount":121,"weaknesses":122,"weaknessesCount":130,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":131,"seoMetadata":132,"configurations":157,"relatedVendorCves":169,"notableEvents":170},"CVE-2012-4456","What is CVE-2012-4456?","The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrary services.","The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, w...","2012-10-09T15:55:01.173","2026-06-16T23:45:08.107",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.03965,[34,34,34,34,34,34,34],"High",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"openstack","keystone","*","cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"2012.2","cpe:2.3:a:openstack:keystone:2012.2:milestone1:*:*:*:*:*:*",2,[48,54,60,65,69,72,77,81,85,88,91,94,97,99,101,103,105,107,109,111,113,115,117,119],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F50665","Secunia",[52,53],"Third Party Advisory","Vendor Advisory",{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2012\u002F09\u002F28\u002F5","Openwall",[58,59,52],"Mailing List","Patch",{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F55716","Securityfocus",[52,64],"VDB Entry",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fbugs.launchpad.net\u002Fkeystone\u002F+bug\u002F1006815","Launchpad",[52],{"url":70,"source":67,"tags":71},"https:\u002F\u002Fbugs.launchpad.net\u002Fkeystone\u002F+bug\u002F1006822",[59,52],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=861179","Red Hat",[76,52],"Issue Tracking",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F78944","Ibmcloud",[52,64],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F14b136aed9d988f5a8f3e699bd4577c9b874d6c1","GitHub",[52],{"url":86,"source":83,"tags":87},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F1d146f5c32e58a73a677d308370f147a3271c2cb",[52],{"url":89,"source":83,"tags":90},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F24df3adb3f50cbb5ada411bc67aba8a781e6a431",[52],{"url":92,"source":83,"tags":93},"https:\u002F\u002Fgithub.com\u002Fopenstack\u002Fkeystone\u002Fcommit\u002F868054992faa45d6f42d822bf1588cb88d7c9ccb",[52],{"url":95,"source":67,"tags":96},"https:\u002F\u002Flists.launchpad.net\u002Fopenstack\u002Fmsg17034.html",[59,52],{"url":49,"source":50,"tags":98},[52,53],{"url":55,"source":56,"tags":100},[58,59,52],{"url":61,"source":62,"tags":102},[52,64],{"url":66,"source":67,"tags":104},[52],{"url":70,"source":67,"tags":106},[59,52],{"url":73,"source":74,"tags":108},[76,52],{"url":78,"source":79,"tags":110},[52,64],{"url":82,"source":83,"tags":112},[52],{"url":86,"source":83,"tags":114},[52],{"url":89,"source":83,"tags":116},[52],{"url":92,"source":83,"tags":118},[52],{"url":95,"source":67,"tags":120},[59,52],24,[123],{"id":124,"name":125,"description":126,"extendedDescription":27,"status":127,"abstraction":128,"structure":129},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":133,"metaDescription":134,"keywords":135,"canonicalUrl":136,"structuredData":137},"What is CVE-2012-4456? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2012-4456, a high severity cyber security vulnerability from 2012. The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack K...","CVE-2012-4456, CVE-2012-4456 vulnerability, CVE-2012-4456 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, openstack security, keystone vulnerability","\u002Fwhat-is\u002Fcve-2012-4456",{"@context":138,"@type":139,"headline":133,"description":134,"datePublished":10,"dateModified":11,"author":140,"publisher":144,"about":148,"mainEntityOfPage":152,"articleSection":155,"keywords":156},"https:\u002F\u002Fschema.org","TechArticle",{"@type":141,"name":142,"url":143},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":141,"name":142,"url":143,"logo":145},{"@type":146,"url":147},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":149,"name":6,"description":150,"additionalType":151},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":153,"@id":154},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2012-4456","Cybersecurity","CVE-2012-4456, CVE-2012-4456 vulnerability, CVE-2012-4456 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[158],{"Operator":28,"Negate":28,"Nodes":159},[160],{"Operator":161,"Negate":32,"CPEMatch":162},"OR",[163,167],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":164,"VersionStartExcluding":28,"VersionStartIncluding":165,"VersionEndExcluding":166,"VersionEndIncluding":28},"C7C2AEDF-D70D-4AA0-9E4F-A0DEEBDE7AB0","2012.1","2012.1.2",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":168,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F6F8A1A4-0A9E-4741-927C-120BF9151B81",[],[],{"lastModified":11,"cacheTime":172,"version":22},1793212239906,{"score":174,"band":175,"action":176,"scoredAt":177},46,"Medium","Plan remediation","2026-07-01T10:18:25.167736+00:00"]