Description (CNA)
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenStack / Keystone | affected 0 before 26.0.1; affected 27.0.0; affected 28.0.0 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.