Security Advisory

CVE-2020-12692

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-06 23:42:42

Last updated 2024-08-04 12:04:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times.

← Browse all CVEs View on cve.org ↗