CVE-2014-5251: Canonical Ubuntu Linux

Medium severity, CVSS 4.9. EPSS: 1.6% chance of exploitation in the next 30 days.

The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.

Affected products

• Canonical Ubuntu Linux: version 14.04 only
• Openstack Keystone: version 2014.1 only; version 2014.1.2 only; version juno-1 only; version juno-2 only

Published 2014-08-25. Last modified 2026-06-17.