CVE:CVE-2022-2447
CNNVD:CNNVD-202209-059
OpenStack是美国国家航空航天局（NASA）的一个云平台管理项目。
OpenStack存在安全漏洞，该漏洞源于应用程序凭据令牌即使在过期后也可以使用。导致经过身份验证的远程攻击者获得访问权限（尽管防御者努力删除访问权限）。
solution:Upgrade openstack keystone to a higher version than -; Upgrade redhat openstack_platform to a higher version than 16.1,16.2,and avoid the version 16.1,16.2; Upgrade redhat quay to a higher version than 3.0.0,and avoid the version 3.0.0; Upgrade redhat storage to a higher version than 3.0,and avoid the version 3.0