CVE-2019-10138

Name of the Vulnerable Software and Affected Versions: Red Hat OpenStack Platform python-novajoin plugin versions prior to 1.1.1

Description: A flaw was discovered in the python-novajoin plugin, where the novajoin API lacked sufficient access control. This allowed any keystone authenticated user to generate FreeIPA tokens.

Recommendations: For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the novajoin API to minimize the risk of exploitation.