CVE-2016-4911
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-4911
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenStack Identity Fernet Token Provider 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenStack是美国国家航空航天局（National Aeronautics and Space Administration）和美国Rackspace公司合作研发的一个云平台管理项目。OpenStack Identity（又名Keystone）是其中的一个用于身份验证的项目，提供身份、令牌、目录和策略服务。 OpenStack Identity 9.0.1 (mitaka)之前9.0.x版本的Fernet Token Provider中存在安全漏洞。远程攻击者可通过审查令牌利用该漏洞阻止令牌链的撤销
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-4911
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-4911
请登录查看更多情报信息。
- https://review.openstack.org/#/c/311886/x_refsource_CONFIRM
- https://security.openstack.org/ossa/OSSA-2016-008.htmlx_refsource_CONFIRM
- https://bugs.launchpad.net/keystone/+bug/1577558x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2016-4911
Same Patch Batch · n/a · 2016-06-13 · 74 CVEs total
| CVE-2016-2473 | Android Qualcomm Wi-Fi驱动安全漏洞 | |
| CVE-2016-2493 | Android Broadcom Wi-Fi驱动提权漏洞 | |
| CVE-2016-2481 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2480 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2479 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2478 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2477 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2476 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2475 | Android Broadcom Wi-Fi驱动提权漏洞 | |
| CVE-2016-2474 | Android Qualcomm Wi-Fi驱动安全漏洞 | |
| CVE-2016-2482 | Android Mediaserver 提权漏洞 | |
| CVE-2016-2472 | Android Qualcomm Wi-Fi驱动安全漏洞 | |
| CVE-2016-2471 | Android Qualcomm Wi-Fi驱动安全漏洞 | |
| CVE-2016-2470 | Android Qualcomm Wi-Fi驱动安全漏洞 | |
| CVE-2016-2469 | Android Qualcomm声音驱动提权漏洞 | |
| CVE-2016-2468 | Android Qualcomm GPU Driver 提权漏洞 | |
| CVE-2016-2467 | Android Qualcomm声音驱动安全漏洞 | |
| CVE-2016-2466 | Android Qualcomm声音驱动安全漏洞 | |
| CVE-2016-2465 | Android Qualcomm Video Driver 本地提权漏洞 | |
| CVE-2016-2464 | Android libwebm 输入验证错误漏洞 |
Showing top 20 of 74 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2016-4911
No comments yet