Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-10138

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.5%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 6.5
Products affected by CVE-2019-10138
  • Python » Novajoin » Version: N/A
    cpe:2.3:a:python:novajoin:-
  • Python » Novajoin » Version: 1.0.10
    cpe:2.3:a:python:novajoin:1.0.10
  • Python » Novajoin » Version: 1.0.11
    cpe:2.3:a:python:novajoin:1.0.11
  • Python » Novajoin » Version: 1.0.12
    cpe:2.3:a:python:novajoin:1.0.12
  • Python » Novajoin » Version: 1.0.13
    cpe:2.3:a:python:novajoin:1.0.13
  • Python » Novajoin » Version: 1.0.14
    cpe:2.3:a:python:novajoin:1.0.14
  • Python » Novajoin » Version: 1.0.15
    cpe:2.3:a:python:novajoin:1.0.15
  • Python » Novajoin » Version: 1.0.16
    cpe:2.3:a:python:novajoin:1.0.16
  • Python » Novajoin » Version: 1.0.17
    cpe:2.3:a:python:novajoin:1.0.17
  • Python » Novajoin » Version: 1.0.18
    cpe:2.3:a:python:novajoin:1.0.18
  • Python » Novajoin » Version: 1.0.19
    cpe:2.3:a:python:novajoin:1.0.19
  • Python » Novajoin » Version: 1.0.20
    cpe:2.3:a:python:novajoin:1.0.20
  • Python » Novajoin » Version: 1.0.21
    cpe:2.3:a:python:novajoin:1.0.21
  • Python » Novajoin » Version: 1.0.22
    cpe:2.3:a:python:novajoin:1.0.22
  • Python » Novajoin » Version: 1.0.9
    cpe:2.3:a:python:novajoin:1.0.9
  • Python » Novajoin » Version: 1.1.0
    cpe:2.3:a:python:novajoin:1.1.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved