Skip to contentOpenstack Keystone vulnerabilities
- openstack keystoneOpenStack Identity (Keystone) Trustee token revocations does not work with memcache backendCVE-2014-2237Fix available5.0 Medium
- openstack python-keystoneclientpython-keystoneclient missing expiration check in PKI token validationCVE-2013-2104Fix available5.5 Medium
- openstack keystone, redhat openstack, canonical ubuntu linux +2 moreThe ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before...CVE-2013-6391Fix available5.8 Medium
- openstack python-keystoneclientpython-keystoneclient unsecure user password updateCVE-2013-2013Fix available2.1 Low
- openstack keystone, redhat openstack, canonical ubuntu linux +1 more +3 moreOpenStack Identity (Keystone) Folsom, Grizzly 2013.1.3 and earlier, and Havana before havana-3...CVE-2013-4222Fix available6.5 Medium
- openstack keystoneOpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI tokenCVE-2013-4294Fix available5.0 Medium
- openstack keystoneOpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous...CVE-2013-2157Fix available4.3 Medium
- openstack keystoneOpenStack Identity (Keystone) improper revoking of the authentication token when deleting a userCVE-2013-2059Fix available6.0 Medium
- openstack keystoneOpenStack Keystone Sensitive information disclosure via log filesCVE-2013-2006Public exploitFix available2.1 Low
- openstack keystoneOpenStack Keystone allows context-dependent attackers to bypass access restrictionsCVE-2013-0282Fix available5.0 Medium
- openstack keystone, red hat openstack folsom for rhel 6, openstack platform 13 (queens) +3 more +5 moreKeystone: openstack keystone: denial of service via large http request with long tenant nameCVE-2013-0270Fix available6.5 Medium
- openstack cinder folsom, folsom, grizzly +3 more +5 moreXML Entity Expansion (XEE) in DjangoCVE-2013-1664Fix available5.0 Medium
- openstack folsom, keystone essex +1 moreXML External Entity (XXE) in DjangoCVE-2013-1665Fix available5.0 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2...CVE-2013-0247Fix available5.0 Medium
- openstack keystonetools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud ...CVE-2012-54832.1 Low
- openstack keystoneOpenStack Keystone Token authorization for a user in a disabled tenant is allowedCVE-2012-4457Fix available4.0 Medium
- openstack keystoneOpenStack Keystone Improper Authentication vulnerabilityCVE-2012-4456Fix available7.5 High
- openstack keystoneOpenStack Keystone does not invalidate existing tokens when granting or revoking rolesCVE-2012-4413Fix available4.0 Medium
- openstack essex, keystone, horizon +2 moreOpenStack Keystone token expiration issuesCVE-2012-3426Fix available4.9 Medium