{"id":"CVE-2019-10138","aliases":["EUVD-2019-0097","GHSA-xf8c-3cgx-fcwm","PYSEC-2019-192","RHBA-2019:0944","RHSA-2019:1728"],"status":"published","title":"Improper Access Control in novajoin","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","severity":{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01028,"percentile":0.63897,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2019-07-30T16:16:51Z","modified":"2026-08-08T10:01:39Z","fixes":[{"ecosystem":"PyPI","package":"novajoin","fixed_in":["1.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-octaviaclient","fixed_in":["0:1.6.0-0.20180816134808.64d007f.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-octaviaclient","fixed_in":["0:1.6.0-0.20180816134808.64d007f.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"ansible-role-container-registry","fixed_in":["0:1.0.1-0.20190218212245.d6a749a.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"ansible-role-redhat-subscription","fixed_in":["0:1.0.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"ansible-role-tripleo-modify-image","fixed_in":["0:1.0.1-0.20190226052419.9014df9.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"ansible-tripleo-ipsec","fixed_in":["0:9.1.0-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican","fixed_in":["0:7.0.1-0.20190204192112.ed17b57.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-api","fixed_in":["0:7.0.1-0.20190204192112.ed17b57.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-common","fixed_in":["0:7.0.1-0.20190204192112.ed17b57.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-keystone-listener","fixed_in":["0:7.0.1-0.20190204192112.ed17b57.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-worker","fixed_in":["0:7.0.1-0.20190204192112.ed17b57.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-agent","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-api","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-central","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-common","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-mdns","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-pool-manager","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-producer","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-sink","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-worker","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-zone-manager","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-heat-ui","fixed_in":["0:1.4.1-0.20190130023741.0b301df.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes","fixed_in":["0:0.5.4-0.20190220170509.17d2635.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes-cni","fixed_in":["0:0.5.4-0.20190220170509.17d2635.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes-common","fixed_in":["0:0.5.4-0.20190220170509.17d2635.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes-controller","fixed_in":["0:0.5.4-0.20190220170509.17d2635.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-manila","fixed_in":["1:7.1.0-2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-manila-share","fixed_in":["1:7.1.0-2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-manila-ui","fixed_in":["0:2.16.1-0.20190204170113.4865df2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-ui","fixed_in":["0:2.0.1-0.20190110112807.85e4a3e.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-selinux","fixed_in":["0:0.8.18-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-tempest","fixed_in":["1:19.0.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-tempest-all","fixed_in":["1:19.0.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-zaqar","fixed_in":["1:7.0.1-0.20181026065336.fed6d77.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-debuginfo","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-devel","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-central","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-common","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-host","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-vtep","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-barbican","fixed_in":["0:7.0.1-0.20190204192112.ed17b57.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-designate","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-designate-tests","fixed_in":["1:7.0.1-0.20190314164436.7f4c878.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-glance-store","fixed_in":["0:0.26.2-0.20181026221750.d001c3c.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-hardware","fixed_in":["0:0.18.1-0.20190301121902.b417976.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-hardware-detect","fixed_in":["0:0.18.1-0.20190301121902.b417976.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-heat-ui-doc","fixed_in":["0:1.4.1-0.20190130023741.0b301df.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-manila","fixed_in":["1:7.1.0-2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-manila-tests","fixed_in":["1:7.1.0-2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-novajoin","fixed_in":["0:1.1.1-2.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-openvswitch2.10","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-os-faults","fixed_in":["0:0.2.1-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-oslo-cache","fixed_in":["0:1.30.3-0.20190204170706.5f42092.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-oslo-cache-lang","fixed_in":["0:1.30.3-0.20190204170706.5f42092.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-ovsdbapp","fixed_in":["0:0.12.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-qpid-proton","fixed_in":["0:0.26.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-telemetry-tests-tempest","fixed_in":["0:0.2.0-0.20190222195250.7f0e315.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-vmware-nsxlib","fixed_in":["0:13.0.1-0.20190220070404.24a7ff4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-wsme","fixed_in":["0:0.9.4-0.20190314161310.1d73d6e.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-zaqar-tests","fixed_in":["1:7.0.1-0.20181026065336.fed6d77.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-glance-store","fixed_in":["0:0.26.2-0.20181026221750.d001c3c.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-kuryr-kubernetes","fixed_in":["0:0.5.4-0.20190220170509.17d2635.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-os-faults","fixed_in":["0:0.2.1-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-os-faults-libvirt","fixed_in":["0:0.2.1-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-oslo-cache","fixed_in":["0:1.30.3-0.20190204170706.5f42092.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-ovsdbapp","fixed_in":["0:0.12.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-telemetry-tests-tempest","fixed_in":["0:0.2.0-0.20190222195250.7f0e315.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-tempest","fixed_in":["1:19.0.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-tempest-tests","fixed_in":["1:19.0.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-vmware-nsxlib","fixed_in":["0:13.0.1-0.20190220070404.24a7ff4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-vmware-nsxlib-tests","fixed_in":["0:13.0.1-0.20190220070404.24a7ff4.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python2-wsme","fixed_in":["0:0.9.4-0.20190314161310.1d73d6e.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"qpid-proton","fixed_in":["0:0.26.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"qpid-proton-c","fixed_in":["0:0.26.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"qpid-proton-debuginfo","fixed_in":["0:0.26.0-3.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"rhosp-release","fixed_in":["0:14.0.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"skydive","fixed_in":["0:0.20.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"skydive-agent","fixed_in":["0:0.20.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"skydive-analyzer","fixed_in":["0:0.20.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"skydive-ansible","fixed_in":["0:0.20.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"skydive-debuginfo","fixed_in":["0:0.20.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"skydive-selinux","fixed_in":["0:0.20.3-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-test","fixed_in":["0:2.10.0-28.el7fdp.2"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-novajoin","fixed_in":["0:1.1.1-3.el7ost"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"novajoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.1.0"},{"fixed":"1.1.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"novajoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}],"versions":["1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.20","1.0.21","1.0.22","1.0.9","1.1.0"]},{"source":"osv","ecosystem":"PyPI","package":"novajoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}],"versions":["1.0.10","1.0.11","1.0.12","1.0.13","1.0.14","1.0.15","1.0.16","1.0.17","1.0.18","1.0.19","1.0.20","1.0.21","1.0.22","1.0.9","1.1.0"]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-octaviaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-0.20180816134808.64d007f.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-octaviaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.0-0.20180816134808.64d007f.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"ansible-role-container-registry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-0.20190218212245.d6a749a.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"ansible-role-redhat-subscription","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"ansible-role-tripleo-modify-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-0.20190226052419.9014df9.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"ansible-tripleo-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.1.0-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.1-0.20190204192112.ed17b57.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.1-0.20190204192112.ed17b57.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.1-0.20190204192112.ed17b57.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-keystone-listener","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.1-0.20190204192112.ed17b57.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-barbican-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.1-0.20190204192112.ed17b57.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-mdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-pool-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-producer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-sink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-designate-zone-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-heat-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-0.20190130023741.0b301df.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-0.20190220170509.17d2635.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-0.20190220170509.17d2635.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-0.20190220170509.17d2635.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-kuryr-kubernetes-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-0.20190220170509.17d2635.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1.0-2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-manila-share","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1.0-2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-manila-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.1-0.20190204170113.4865df2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20190110112807.85e4a3e.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.18-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-tempest-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-zaqar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20181026065336.fed6d77.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-ovn-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.1-0.20190204192112.ed17b57.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-designate-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20190314164436.7f4c878.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-glance-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-0.20181026221750.d001c3c.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.1-0.20190301121902.b417976.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-hardware-detect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.1-0.20190301121902.b417976.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-heat-ui-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-0.20190130023741.0b301df.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1.0-2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-manila-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.1.0-2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-novajoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-2.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-openvswitch2.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-os-faults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-oslo-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-0.20190204170706.5f42092.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-oslo-cache-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-0.20190204170706.5f42092.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-ovsdbapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-telemetry-tests-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-0.20190222195250.7f0e315.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-vmware-nsxlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.1-0.20190220070404.24a7ff4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-wsme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-0.20190314161310.1d73d6e.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-zaqar-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.1-0.20181026065336.fed6d77.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-glance-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.2-0.20181026221750.d001c3c.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.4-0.20190220170509.17d2635.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-os-faults","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-os-faults-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-oslo-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.3-0.20190204170706.5f42092.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-ovsdbapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-telemetry-tests-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-0.20190222195250.7f0e315.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-tempest-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-vmware-nsxlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.1-0.20190220070404.24a7ff4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-vmware-nsxlib-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.1-0.20190220070404.24a7ff4.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python2-wsme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-0.20190314161310.1d73d6e.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.0-3.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"rhosp-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:14.0.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"skydive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"skydive-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"skydive-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"skydive-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"skydive-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"skydive-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openvswitch2.10-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-28.el7fdp.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-novajoin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el7ost"}]}]}],"products":[{"vendor":"python","product":"novajoin"},{"vendor":"red hat","product":"python-novajoin"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10138","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","web","report"]},{"url":"https://review.opendev.org/#/c/631240/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10138","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/novajoin/PYSEC-2019-192.yaml","tags":["web"]},{"url":"https://review.opendev.org/#/c/631240","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xf8c-3cgx-fcwm","tags":["advisory"]},{"url":"https://github.com/openstack-archive/novajoin","tags":["package"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0944","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700788","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_0944.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10138","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1728","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717237","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1728.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-10138","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","status":"published","published":"2019-07-30T16:16:51Z","modified":"2024-08-04T22:10:10.017Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:20:19.056416Z"}],"euvd":[{"id":"EUVD-2019-0097","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","status":"published","published":"2019-07-30T16:16:51Z","modified":"2024-08-04T22:10:10Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:40:53.61807Z"}],"ghsa":[{"id":"GHSA-xf8c-3cgx-fcwm","title":"Improper Access Control in novajoin","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","status":"published","published":"2020-03-12T16:54:06Z","modified":"2024-09-26T14:41:20Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:38:06.29677Z"}],"nvd":[{"id":"CVE-2019-10138","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","status":"published","published":"2019-07-30T17:15:12.39Z","modified":"2026-06-17T02:10:20.14Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:05:21.892729Z"}],"osv":[{"id":"GHSA-xf8c-3cgx-fcwm","title":"Improper Access Control in novajoin","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","status":"published","published":"2020-03-12T16:54:06Z","modified":"2024-09-26T15:06:44.021682Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:46:59.835583Z"},{"id":"RHBA-2019:0944","title":"Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 14 bug fix and enhancement advisory","status":"published","published":"2024-09-13T19:47:55Z","modified":"2026-08-08T10:01:36Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2019:1728","title":"Red Hat Security Advisory: python-novajoin security and bug fix update","status":"published","published":"2024-09-13T19:52:49Z","modified":"2026-08-08T10:01:39Z","cvss":[{"version":"3.0","score":7.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"PYSEC-2019-192","description":"A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.","status":"published","published":"2019-07-30T17:15:00Z","modified":"2023-11-08T04:00:41.571952Z","updated_at":"2026-11-02T15:52:52.192131Z"}]}}