Thanks for the diff, looks good to me.
With the attack vector here being sniffing the auth header/no TTL, then using the header to reissue openstack tokens, this appears to be a Class A.[0] If this is agreed to be the case, I can work on drafting up an impact description here.
[0] https://security.openstack.org/vmt-process.html#incident-report-taxonomy
Thanks for the diff, looks good to me.
With the attack vector here being sniffing the auth header/no TTL, then using the header to reissue openstack tokens, this appears to be a Class A.[0] If this is agreed to be the case, I can work on drafting up an impact description here.
[0] https:/ /security. openstack. org/vmt- process. html#incident- report- taxonomy