Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/07/22 12:36 p.m.9 views

openstack-keystone: failure to check signature TTL of the EC2 credential auth method

A flaw was found in Keystone, where the restriction was not checked for the Signature Version 4 V4 process of AWS signatures issued within a limited time window. This flaw allows an attacker to capture an auth header and reuse it, potentially maintaining indefinite access...

5.5CVSS5.7AI score0.00705EPSS
SaveExploits0References5
Rows per page
Query Builder