Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2022-2447

Openstack: Application credential token remains valid longer than expected

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Openstack Redhat
Products
Keystone Openstack Openstack Platform and 2 more
CVE-2019-3790

Ops Manager uaa client issues tokens after refresh token expiration

The Pivotal Ops Manager, 2.2.x versions prior to 2.2.23, 2.3.x versions prior to 2.3.16, 2.4.x versions prior to 2.4.11, and 2.5.x versions prior to 2.5.3, contain configuration that circumvents refresh token expiration. A remote authenticated user can gain access to a browser session that was supposed to have expired, and access Ops Manager resources.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Pivotal Software
Products
Operations Manager