Debian/keystone: medium 5.4
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then u
Action: Upgrade keystone to 2:17.0.0~rc2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:17.0.0~rc2-1 | - |
Fixed versions
| 2:17.0.0~rc2-1 |
Sources
published · modified · JSON