keystone vulnerabilities (Ubuntu)
28 vulnerabilities.
-
keystoneUbuntu An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated... 7.6 High -
keystoneUbuntu In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project... 7.1 High -
keystoneUbuntu In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms ... 7.6 High -
keystoneUbuntu In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application... 7.6 High -
keystoneUbuntu OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token 6.0 Medium -
keystoneUbuntu OpenStack Keystone has an Incorrect Authorization issue 6.0 Medium -
keystoneUbuntu OpenStack Keystone has an Authorization Bypass 6.0 Medium -
keystoneUbuntu OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential 6.0 Medium -
keystoneUbuntu OpenStack Keystone has an Incorrect Authorization Issue 7.9 High -
keystoneUbuntu OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean 7.7 High -
keystoneUbuntu OpenStack Keystone: Restricted application credentials can create EC2 credentials 3.5 Low -
keystoneUbuntu keystone vulnerability No score -
keystoneUbuntu OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization. 7.5 High -
keystoneUbuntu A flaw was found in OpenStack. The application credential tokens can be used even after they have... 6.6 Medium -
keystoneUbuntu Openstack Keystone Incorrect Authorization vulnerability 7.4 High -
keystoneUbuntu OpenStack Keystone allows information disclosure during account locking 7.5 High -
keystoneUbuntu OpenStack Keystone does not check signature TTL of the EC2 credential auth method 5.4 Medium -
keystoneUbuntu OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID 8.8 High -
keystoneUbuntu Insufficient Session Expiration in OpenStack Keystone 8.8 High -
keystoneUbuntu OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context 8.8 High -
keystoneUbuntu ** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because... 5.3 Medium -
keystoneUbuntu OpenStack Identity service (keystone) Incorrect Authorization 6.8 Medium -
keystoneUbuntu OpenStack Identity Keystone Exposure of Sensitive Information 4.0 Medium -
keystoneUbuntu OpenStack Keystone Domain-scoped tokens don't get revoked 4.9 Medium -
keystoneUbuntu OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events 4.9 Medium -
keystoneUbuntu OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events 4.9 Medium -
keystoneUbuntu OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2... 6.5 Medium -
keystoneUbuntu OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege 6.0 Medium