CVE-2022-2447
N/A
N/A
Summary
A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | openstack-keystone | openstack-keystone as shipped in Red Hat OpenStack 16.1 and 16.2 | affected |
Weaknesses
- CWE-324: CWE-324
ADP Enrichment
CVE Program Container
Additional References
- https://bugzilla.redhat.com/show_bug.cgi?id=2105419
- https://access.redhat.com/security/cve/CVE-2022-2447
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2105419
- https://access.redhat.com/security/cve/CVE-2022-2447
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.