Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Identity 权限许可和访问控制
Vulnerability Description
OpenStack是美国国家航空航天局(National Aeronautics and Space Administration)和美国Rackspace公司合作研发的一个云平台管理项目。OpenStack Identity(又名Keystone)是其中的一个用于身份验证的项目,提供身份、令牌、目录和策略服务。 OpenStack Identity(Keystone)2014.1.2.1版本之前2014.1.x版本和Juno-3版本之前Juno版本的MySQL令牌驱动程序中存在安全漏洞,该漏洞源于使用不
CVSS Information
N/A
Vulnerability Type
N/A