Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2020/03/12 4:54 p.m.68 views

Improper Access Control in novajoin

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

8.8CVSS4.1AI score0.00442EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2019/07/30 5:15 p.m.3 views

CVE-2019-10138

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

8.8CVSS7.1AI score0.00442EPSS
Exploits0References2
NVD
NVD
added 2019/07/30 5:15 p.m.25 views

CVE-2019-10138

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

8.8CVSS7.7AI score0.00442EPSS
Exploits0References2
OSV
OSV
added 2019/07/30 5:15 p.m.29 views

PYSEC-2019-192

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

8.8CVSS3.4AI score0.00442EPSS
Exploits0References3
Prion
Prion
added 2019/07/30 5:15 p.m.13 views

Design/Logic Flaw

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

6.5CVSS8.5AI score0.00442EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2019/05/26 2:20 a.m.18 views

CVE-2019-10138

A flaw was discovered in the python-novajoin plugin for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

8.8CVSS2.1AI score0.00442EPSS
Exploits0References2
Rows per page
Query Builder