Entrar Obtener clave API

Vulnerabilidades de openstack 1 (CVE)

Registros CVE publicados para openstack 1, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

5.4Media

CVE-2012-5571 hace 13 años

Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling

Red Hat OpenStack Essex for RHEL 6; Red Hat OpenStack Folsom for RHEL 6; Red Hat Red Hat OpenStack Platform 13 (Queens); Red Hat Red Hat OpenStack Platform 16.2

A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) tokens when a user's role h…

2.0%EPSS