CVEブラウザに戻る

CVE-2019-10138

HIGH

8.8

CVSS Severity Score

EPSS Score0.1800%

EPSS Percentile17.46th

Published2019年7月30日

Last Modified2024年11月21日

Vulnerability Description

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.

Affected Platforms (CPE)

📦

Python

Novajoin

< 1.1.1

References & Advisories

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10138

🔗 https://review.opendev.org/#/c/631240/

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10138

🔗 https://review.opendev.org/#/c/631240/

関連する脆弱性情報

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...