Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all projects in the deployment and their attributes. Only Keystone with the /v3/OS-FEDERATION endpoint enabled via policy.json is affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Keystone Federation组件安全漏洞
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。OpenStack Keystone是其中的一个用于身份验证的项目，提供身份、令牌、目录和策略服务。Federation是其中的一个组件。 OpenStack Keystone 11.0.4之前版本、12.0.0之前版本和13.0.0之前版本中的Federation组件存在安全漏洞。攻击者可通过发送请求（GET /v3
CVSS Information
N/A
Vulnerability Type
N/A