| Openstack Keystone Incorrect Authorization vulnerabilityCVE-2021-3563 · GHSA-CC99-WHM5-MMQ3Version ranges need review. |
keystoneRed Hat OpenStack Platform 10 (Newton)/openstack-keystone |
PyPIRed Hat |
Critical
|
No fix reported |
|
| OpenStack Keystone has an Incorrect Authorization issueCVE-2026-43000 · GHSA-Q623-F4J4-P4XJVersion ranges need review. |
keystoneRed Hat OpenStack Platform 16.2/openstack-keystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Keystone has an Incorrect Authorization IssueCVE-2026-43001 · GHSA-HHQ2-3832-XXCVVersion ranges need review. |
keystone |
PyPI |
High
|
Fix reported |
|
| OpenStack Keystone has an Authorization BypassCVE-2026-42999 · GHSA-2R23-2G6V-2M5FVersion ranges need review. |
keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credentialCVE-2026-42998 · GHSA-8F8M-WRVR-WCVFVersion ranges need review. |
keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Keystone: LDAP identity backend does not convert enabled attribute to booleanCVE-2026-40683 · GHSA-PFX2-9X9M-7GHXVersion ranges need review. |
keystoneRed Hat OpenStack Platform 13 (Queens)/openstack-keystone |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued tokenCVE-2026-44394 · GHSA-WHQR-FGM5-X77QVersion ranges need review. |
keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Keystone Allows Remote User Account CreationCVE-2012-3542 · GHSA-GF2Q-J2QQ-PJF2Version ranges need review. |
keystone |
PyPI |
High
|
Fix reported |
|
| OpenStack Keystone does not invalidate existing tokens when granting or revoking rolesCVE-2012-4413 · GHSA-MRXV-65RV-6HXQVersion ranges need review. |
keystone |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Keystone and other components vulnerable to Improper Certificate ValidationCVE-2013-2255 · GHSA-QH2X-HPF9-CF2GVersion ranges need review. |
cinderkeystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected CredentialsCVE-2015-7546 · GHSA-8C4W-V65P-JVCVVersion ranges need review. |
keystonekeystonemiddleware |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Identity service (keystone) Incorrect AuthorizationCVE-2017-2673 · GHSA-J36M-HV43-7W7MVersion ranges need review. |
keystoneRed Hat OpenStack Platform 11 (Ocata)/openstack-keystone |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.CVE-2025-65073 · GHSA-HCQG-5G63-7J9HVersion ranges need review. |
keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone |
PyPIRed Hat |
High
|
Fix reported |
|
| OpenStack Keystone Token authorization for a user in a disabled tenant is allowedCVE-2012-4457 · GHSA-X8H4-XF47-PQC3Version ranges need review. |
keystone |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Identity Keystone Privilege Escalation vulnerabilityCVE-2013-4477 · GHSA-F889-WFWM-6P7MVersion ranges need review. |
keystoneRed Hat OpenStack Platform 4/openstack-keystone |
PyPIRed Hat |
Low
|
Fix reported |
|
| OpenStack Keystone allows information disclosure during account lockingCVE-2021-38155 · GHSA-4225-97PR-RR52Version ranges need review. |
keystone |
PyPI |
High
|
Fix reported |
|
| OpenStack Keystone Improper Authentication vulnerabilityCVE-2012-4456 · GHSA-MF98-R2GF-2X3WVersion ranges need review. |
keystone |
PyPI |
High
|
Fix reported |
|
| OpenStack Keystone Denial of Service vulnerability via a large HTTP requestCVE-2013-0270 · GHSA-4PPJ-4P4V-JF4PVersion ranges need review. |
keystoneRed Hat OpenStack Platform 13 (Queens)/redhat-user-workloads/openstack-keystone |
PyPIRed Hat |
Medium
|
Fix reported |
|
| OpenStack Identity (Keystone) Denial of ServiceCVE-2013-2014 · GHSA-7332-36H8-8JH8Version ranges need review. |
keystone |
PyPI |
Medium
|
Fix reported |
|
| OpenStack Identity Keystone Improper Privilege ManagementCVE-2014-0204 · GHSA-C4P9-87H3-7VR4Version ranges need review. |
keystone |
PyPI |
Medium
|
Fix reported |
|
