CVE-2019-10138

HIGH · CVSS 8.8 EPSS 1.03%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-07-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2019-10138

Severity

HIGH

CVSS

8.8

EPSS

1.03%

Original Filing — NVD Description

A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens.