PT-2014-6367
CVE-2014-5251
·
تاريخ النشر
2014-08-15
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
7.1
عاليةالمقاييسAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
OpenStack Identity (Keystone) versions 2014.1.x before 2014.1.2.1
OpenStack Identity (Keystone) version Juno before Juno-3
Description
The issue is related to the MySQL token driver in OpenStack Identity (Keystone), where timestamps are stored with incorrect precision. This causes the expiration comparison for tokens to fail, allowing remote authenticated users to retain access via an expired token.
Recommendations
For OpenStack Identity (Keystone) versions 2014.1.x before 2014.1.2.1, update to version 2014.1.2.1 or later to resolve the issue.
For OpenStack Identity (Keystone) version Juno before Juno-3, update to Juno-3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾