Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11331
HistoryJan 15, 2019 - 9:00 a.m.

Escalation Of Privileges

2019-01-1509:00:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.003

Percentile

71.2%

python-keystoneclient is vulnerable to remote authenticated users gaining privileges. The auth_token middleware doesn’t correctly retrieve user tokens from memcache, allowing remote authenticated users to gain privileges by issuing a large number of requests.