nova vnc console authentication is not secure
Issue
- Nova VNC console service only authenticates with a token when using a web-based VNC tool (Horizon)
- Using any VNC client to connect to any of the compute nodes, it automatically connects to the console of the first instance that launched on that node. It does not deny you, and it does not prompt you to authenticate with horizon.
Environment
- Red Hat OpenStack Platform 7
- Red Hat OpenStack Platform 8
- Red Hat OpenStack Platform 9
- Red Hat OpenStack Platform 10
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
