Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Keystone 权限许可和访问控制问题漏洞
Vulnerability Description
Keystone是OpenStack开源的一款强大的CMS。用于帮助您比任何其他 Cms 或应用程序框架更快地构建和扩展。 OpenStack Keystone 2012.1.3版本中存在权限许可和访问控制问题漏洞。认证的攻击者可利用该漏洞绕过某些目地安全限制，并执行未授权操作，且有助于发起进一步攻击。
CVSS Information
N/A
Vulnerability Type
N/A