-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| keystone | pip | >= 2012.2.0, < 2013.1.4 | 2013.1.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from token backends storing full PKI tokens in revocation lists instead of hashed IDs. The memcache backend's _add_to_revocation_list and delete_token functions directly handled this flawed storage mechanism. Patches show these functions were modified to use token.unique_id() hashing instead of raw token data. The KVS backend shared similar architecture based on bug report descriptions, though specific code changes aren't shown here. These functions would appear in profilers when processing token revocation operations with unhashed token data.
PythonPython