← Vulnerability feed

Vulnerability record · CVE-2022-2447 · published 1 September 2022

CVE-2022-2447: Openstack keystone vulnerability

Openstack · Keystone

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

6.6 CVSS 3.1 Medium EPSS 0.72% · top 47.9% CWE-324 · CWE-324CWE-672 · CWE-672
6.6CVSS 3.1 base score
0.72%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/security/cve/CVE-2022-2447 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2105419 ExploitIssue TrackingVendor Advisory
https://access.redhat.com/security/cve/CVE-2022-2447 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2105419 ExploitIssue TrackingVendor Advisory

Track CVE-2022-2447 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2012-1823PHP-CGI query string option injection enables remote code executionPHP versions before 5.3.12 and 5.4.x before 5.4.2, when run as a CGI script (php-cgi), mishandle query strings that lack an equals sign, allowing com…KEVEPSS 100%analysed7.5CVE-2023-44487HTTP/2 Rapid Reset stream cancellation denial of serviceThe HTTP/2 protocol permits a client to cancel many streams quickly, and the server's handling of those resets consumes disproportionate resources. T…KEVEPSS 100%analysed7.5CVE-2014-0160OpenSSL TLS/DTLS Heartbeat Extension Out-of-Bounds Read (Heartbleed)OpenSSL 1.0.1 before 1.0.1g mishandles Heartbeat Extension packets in its TLS and DTLS implementations, causing an out-of-bounds read of process memo…KEVEPSS 100%analysed9.9CVE-2020-10731Redhat openstack platform improper access control vulnerabilityA flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw cause…EPSS 0.89%9.8CVE-2023-3961Samba path traversal vulnerabilityA path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory…EPSS 2.4%9.8CVE-2022-26148Grafana Zabbix integration exposes cleartext password in page sourceGrafana through 7.3.4, when integrated with Zabbix, embeds the Zabbix account password and URL in the HTML source of api_jsonrpc.php. Anyone who can …EPSS 53%analysed9.8CVE-2021-3762Redhat clair path traversal vulnerabilityA directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image w…EPSS 4.8%9.8CVE-2012-4406Openstack swift deserialization of untrusted data vulnerabilityOpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memca…EPSS 6.6%

Source: NIST National Vulnerability Database (record CVE-2022-2447), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.