5 matches found
openstack-keystone: token expiration date stored incorrectly
A flaw was found in keystone revocation events that resulted in the "issuedat" time being updated when a token created by the V2 API was processed by the V3 API. This could allow a user to evade token revocation. Only OpenStack Identity setups configured to make use of revocation events and UUID...
4.9CVSS5.4AI score0.01515EPSS
SaveExploits0References4
20