PatchFirst · Vulnerabilidades recientes
Vulnerabilidades conocidas que afectan a keystone 2014.2.4: 2. Compara las versiones corregidas de abajo con la que tienes instalada.
Vulnerabilidades: 2
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining. NOTE: this issue exists because of a CVE-2012-3426 regression.
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.