cvelist/2022/2xxx/CVE-2022-2447.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2022-2447",
        "ASSIGNER": "secalert@redhat.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "openstack-keystone",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "openstack-keystone as shipped in Red Hat OpenStack 16.1 and 16.2"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-324"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2105419",
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2105419"
            },
            {
                "refsource": "MISC",
                "name": "https://access.redhat.com/security/cve/CVE-2022-2447",
                "url": "https://access.redhat.com/security/cve/CVE-2022-2447"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A flaw was found in OpenStack. The application credential tokens can be used even after they have expired. This flaw allows an authenticated remote attacker to obtain access despite the defender's efforts to remove access."
            }
        ]
    }
}