Security Advisory
CVE-2019-10138
8.8
HIGH
Vulnerability Description
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.
Published Date
July 30, 2019
Official Source
NIST NVD Advisory