View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2012-5563 low priority: Ubuntu including 1 source packages (keystone), 6 status rows across 6 suites (hardy, lucid, oneiric, precise, quantal, upstream): DNE 2, not-affected 2, pending 1, released 1.
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.