Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r88f-774m-5rj4

Опубликовано: 02 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A flaw was found in OpenStack. The application credential tokens can be used even after they have expired. This flaw allows an authenticated remote attacker to obtain access despite the defender's efforts to remove access.

A flaw was found in OpenStack. The application credential tokens can be used even after they have expired. This flaw allows an authenticated remote attacker to obtain access despite the defender's efforts to remove access.

EPSS

Процентиль: 70%
0.00629
Низкий

8.8 High

CVSS3

Дефекты

CWE-672

Связанные уязвимости

CVSS3: 6.6
ubuntu
больше 3 лет назад

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

CVSS3: 6.6
redhat
больше 3 лет назад

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

CVSS3: 6.6
nvd
больше 3 лет назад

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

CVSS3: 6.6
debian
больше 3 лет назад

A flaw was found in Keystone. There is a time lag (up to one hour in a ...

EPSS

Процентиль: 70%
0.00629
Низкий

8.8 High

CVSS3

Дефекты

CWE-672