medium6.6
CVE-2022-2447
A flaw was found in Keystone.
Impact
A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Keystone | All versions |
| Redhat | Openstack Platform | Versions 16.1, 16.2 |
| Redhat | Quay | Version 3.0.0 |
| Redhat | Storage | Version 3.0 |