Ubuntu Security Notice USN-1641-1

newsbot

newsbot

RSS Feed
Ubuntu Security Notice 1641-1 - Vijaya Erukala discovered that Keystone did not properly invalidate EC2-style credentials such that if credentials were removed from a tenant, an authenticated and authorized user using those credentials may still be allowed access beyond the account owner's expectations. It was discovered that Keystone did not properly implement token expiration. A remote attacker could use this to continue to access an account that is disabled or has a changed password. This issue was previously fixed as CVE-2012-3426 but was reintroduced in Ubuntu 12.10. Various other issues were also addressed.

Weiterlesen...
 

Ähnliche Themen

Zugriff Ubuntu 16.04. auf Freigabe 18.04. LTS nicht möglich

Ubuntu Security Notice USN-1680-1

Ubuntu Security Notice USN-1680-1

Ubuntu Security Notice USN-1552-1

Ubuntu Security Notice USN-1663-1

Zurück
Oben