Skip to content
OpenAdvisories
High RHSA-2019:1728 1 CVE

Red Hat Security Advisory: python-novajoin security and bug fix update

Published Sep 13, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 python-novajoin 0:1.1.1-3.el7ost

Vulnerabilities 1

  • High 7.1
    CVE-2019-10138

    Improper Access Control in novajoin

    A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.

    Red Hat python-novajoin novajoin PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1608273
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1670573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1717237
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1728.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-10138
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10138
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10138
  • article
    https://review.opendev.org/#/c/631240/