View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2014-5253 medium priority: Ubuntu including 1 source packages (keystone), 4 status rows across 4 suites (lucid, precise, trusty, upstream): released 2, DNE 1, not-affected 1.
OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 does not properly revoke tokens when a domain is invalidated, which allows remote authenticated users to retain access via a domain-scoped token for that domain.