In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.
OpenStack keystonemiddleware Schwachstellen (CVE)
Für OpenStack keystonemiddleware veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
8.3Hoch
OpenStack keystonemiddleware
9.9Kritisch
OpenStack keystonemiddleware; Red Hat Red Hat OpenShift Container Platform 4.17; Red Hat Red Hat OpenShift Container Platform 4.18; Red Hat Red Hat OpenShift Container Platform 4.19
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before process…