In the event of an account compromise, users should check the trusts issued in Keystone
Bug #1341849 reported by
Robert Clark
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Security Notes |
Fix Released
|
High
|
Stanislaw Pitucha | ||
Bug Description
Trusts can be used to persist access to a compromised users account.
Followup with Travis McPeak.
Revision history for this message
| Stanislaw Pitucha (stanislaw-pitucha) wrote | #1 |
| Changed in ossn: | |
| assignee: | nobody → Stanislaw Pitucha (stanislaw-pitucha) |
| Changed in ossn: | |
| status: | New → In Progress |
| importance: | Undecided → High |
| Changed in ossn: | |
| status: | In Progress → Fix Released |
Revision history for this message
| Robert Clark (robert-clark) wrote | #2 |
To post a comment you must log in.
I'll write something up for this one.