Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Identity 权限许可和访问控制漏洞
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。OpenStack Identity（又名Keystone）是其中的一个用于身份验证的项目，提供身份、令牌、目录和策略服务。 OpenStack Identity（Keystone）2014.1.2.1版本之前2014.1.x版本和Juno-3版本之前Juno版本的V3 API中存在安全漏洞，该漏洞源于程序为UUID
CVSS Information
N/A
Vulnerability Type
N/A