Beveiligingsadvies

CVE-2014-5251

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-08-25 14:00:00
Laatst bijgewerkt 2024-08-06 11:41:47
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The MySQL token driver in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 stores timestamps with the incorrect precision, which causes the expiration comparison for tokens to fail and allows remote authenticated users to retain access via an expired token.