OpenStack Security Advisory

  1. Bug #1041396
  2. Comment #23

Comment 23 for bug 1041396

Revision history for this message
Joseph Heck (heckj) wrote : Re: Token validation includes revoked roles

agreed with Adam - not support token_list() is opening a security hole

patches are good with https://review.openstack.org/#/c/12506/ merged in place (which it is in master)

we'll need a https://review.openstack.org/#/c/12506/ equiv against stable-essex as well.