Comment 5 for bug 1855080

Revision history for this message
Daniel 'f0o' Preussker (dpreussker) wrote : Re: Credentials API allows listing and retrieving of all user's credentials

Apologies for the IRC disclosure, this was before I realized what I just ran into. I fully suspected the issue within my policy definition and only upon further looking at it and cross-referencing on a different OpenStack platform I understood that this was indeed a Security Issue and not just a config fail.

Should I request a CVE on your behalf? Or is that being tracked by the VulnTeam?