N/A

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

N/A

使用已过期的密钥

OpenStack 安全漏洞

OpenStack是美国国家航空航天局（NASA）的一个云平台管理项目。 OpenStack存在安全漏洞，该漏洞源于应用程序凭据令牌即使在过期后也可以使用。导致经过身份验证的远程攻击者获得访问权限（尽管防御者努力删除访问权限）。

N/A

N/A