CVE-2022-2447

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

A flaw was found in OpenStack. The application credential tokens can be used even after they have expired. This flaw allows an authenticated remote attacker to obtain access despite the defender's efforts to remove access. See CVE-2022-2447.


MISC:https://access.redhat.com/security/cve/CVE-2022-2447: https://access.redhat.com/security/cve/CVE-2022-2447
MISC:https://bugzilla.redhat.com/show_bug.cgi?id=2105419: https://bugzilla.redhat.com/show_bug.cgi?id=2105419

Resources

• https://access.redhat.com/security/cve/CVE-2022-2447
• https://bugzilla.redhat.com/show_bug.cgi?id=2105419
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2447