Search vulnerabilities

Results 1

Export CSV
CVE-2019-10138

python-novajoin: novajoin API lacks access control

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Products