Keystone "scoped tokens" imply better security isolation than is actually implemented
Bug #1341816 reported by
Robert Clark
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Security Notes |
Fix Released
|
High
|
Robert Clark | ||
Bug Description
Scoped tokens are not endpoint bound, not matching user expectations.
A fix is in flight but won't be complete for some time and it may be useful to have an OSSN to provide guidance on the issue.
Consult with Nathan Kinder for more information.
Revision history for this message
| Priti Desai (priti-desai) wrote | #1 |
| Changed in ossn: | |
| assignee: | nobody → Priti Desai (priti-desai) |
| Changed in ossn: | |
| status: | New → In Progress |
| importance: | Undecided → High |
Revision history for this message
| Nathan Kinder (nkinder) wrote | #2 |
Revision history for this message
| Priti Desai (priti-desai) wrote | #3 |
| Changed in ossn: | |
| assignee: | Priti Desai (priti-desai) → nobody |
| status: | In Progress → New |
| Changed in ossn: | |
| assignee: | nobody → Robert Clark (robert-clark) |
Revision history for this message
| Nathan Kinder (nkinder) wrote | #4 |
| Changed in ossn: | |
| status: | New → Fix Released |
To post a comment you must log in.
I will take it up. Nathan, lets have a discussion on this. Thanks !!!