keystone vulnerabilities (Debian)
55 vulnerabilities.
-
keystoneDebian An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated... 7.6 High -
keystoneDebian In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project... 7.1 High -
keystoneDebian In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms ... 7.6 High -
keystoneDebian In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application... 7.6 High -
keystoneDebian OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token 6.0 Medium -
keystoneDebian OpenStack Keystone has an Incorrect Authorization issue 6.0 Medium -
keystoneDebian OpenStack Keystone has an Authorization Bypass 6.0 Medium -
keystoneDebian OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential 6.0 Medium -
keystoneDebian OpenStack Keystone has an Incorrect Authorization Issue 7.9 High -
keystoneDebian OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean 7.7 High -
keystoneDebian OpenStack Keystone: Restricted application credentials can create EC2 credentials 3.5 Low -
keystoneDebian OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization. 7.5 High -
keystoneDebian Openstack Keystone Incorrect Authorization vulnerability 7.4 High -
keystoneDebian OpenStack Keystone allows information disclosure during account locking 7.5 High -
keystoneDebian OpenStack Keystone does not check signature TTL of the EC2 credential auth method 5.4 Medium -
keystoneDebian OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID 8.8 High -
keystoneDebian Insufficient Session Expiration in OpenStack Keystone 8.8 High -
keystoneDebian OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context 8.8 High -
keystoneDebian OpenStack Keystone Credential Leakage 8.8 High -
keystoneDebian OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space 7.5 High -
keystoneDebian OpenStack Keystone and other components vulnerable to Improper Certificate Validation 5.9 Medium -
keystoneDebian In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an... 5.3 Medium -
keystoneDebian OpenStack Identity service (keystone) Incorrect Authorization 6.8 Medium -
keystoneDebian OpenStack Identity Keystone Improper Access Control 4.3 Medium -
keystoneDebian OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials 7.5 High -
keystoneDebian OpenStack Keystone Logs Passwords 4.0 Medium -
keystoneDebian OpenStack Identity Keystone Improper Privilege Management 6.5 Medium -
keystoneDebian OpenStack Identity Keystone Exposure of Sensitive Information 4.0 Medium -
keystoneDebian OpenStack Keystone Domain-scoped tokens don't get revoked 4.9 Medium -
keystoneDebian OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events 4.9 Medium -
keystoneDebian OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events 4.9 Medium -
keystoneDebian OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2... 6.5 Medium -
keystoneDebian OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege 6.0 Medium -
keystoneDebian OpenStack Identity (Keystone) Denial of Service 5.0 Medium -
keystoneDebian OpenStack Identity (Keystone) DoS through V3 API authentication chaining 7.8 High -
keystoneDebian python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware 6.0 Medium -
keystoneDebian OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend 5.0 Medium -
keystoneDebian The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before... 5.8 Medium -
keystoneDebian OpenStack Identity Keystone Privilege Escalation vulnerability 3.3 Low -
keystoneDebian OpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3... 6.5 Medium -
keystoneDebian OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token 5.0 Medium -
keystoneDebian OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous... 4.3 Medium -
keystoneDebian OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user 6.0 Medium -
keystoneDebian OpenStack Keystone Sensitive information disclosure via log files 2.1 Low -
keystoneDebian OpenStack Keystone allows context-dependent attackers to bypass access restrictions 5.0 Medium -
keystoneDebian Keystone: openstack keystone: denial of service via large http request with long tenant name 6.5 Medium -
keystoneDebian XML Entity Expansion (XEE) in Django 5.0 Medium -
keystoneDebian XML External Entity (XXE) in Django 5.0 Medium -
keystoneDebian OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2... 5.0 Medium -
keystoneDebian Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling 5.4 Medium - Show olderLoading…