Lucene search

K
osvGoogleOSV:GHSA-XF8C-3CGX-FCWM
HistoryMar 12, 2020 - 4:54 p.m.

Improper Access Control in novajoin

2020-03-1216:54:06
Google
osv.dev
3

0.001 Low

EPSS

Percentile

40.3%

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.

0.001 Low

EPSS

Percentile

40.3%