OpenStack Compute (nova)

  1. Bug #1325128
  2. Comment #11

Comment 11 for bug 1325128

Revision history for this message
Robert Clark (robert-clark) wrote : Re: nova metadata does not use a constant time compare for validating an HMAC token

History is littered with attack vectors that were only theoretical - until they weren't.

Are there reasonable configuration steps that can be taken to lessen the risk?