VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Sep 1, 2022· Updated Jun 17, 2026

CVE-2022-2447

CVE-2022-2447

Description

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • OpenStack/Keystone
    cpe:2.3:a:openstack:keystone:-:*:*:*:*:*:*:*
  • Red Hat/Openstack2 versions
    cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*
  • Red Hat/Quay
    cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*
  • Red Hat/Storage
    cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*
  • Keystone/@keystone-6/corecpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.