Red Hat OpenStack Platform 13 (Queens)/openstack-keystone

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Openstack Keystone Incorrect Authorization vulnerabilityCVE-2021-3563 · GHSA-CC99-WHM5-MMQ3Version ranges need review.	keystone Red Hat OpenStack Platform 10 (Newton)/openstack-keystone	PyPIRed Hat	Critical	No fix reported	2026-10-27
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to booleanCVE-2026-40683 · GHSA-PFX2-9X9M-7GHXVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/openstack-keystone	PyPIRed Hat	High	Fix reported	2026-09-10
OpenStack Keystone: Restricted application credentials can create EC2 credentialsCVE-2026-33551 · GHSA-4PHW-6824-6CFPVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/openstack-keystone	PyPIRed Hat	Low	Fix reported	2026-06-10
Insufficient Session Expiration in OpenStack KeystoneCVE-2020-12690 · GHSA-6M8P-X4QW-GH5JVersion ranges need review.	keystone Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-keystone	PyPIRed Hat	High	Fix reported	2024-09-27
Openstack: Application credential token remains valid longer than expectedCVE-2022-2447	Red Hat Integration Data Virtualisation Operator/openstack Red Hat JBoss Data Grid 7/openstack	Red Hat	Medium	No fix reported	Not recorded
openstack-keystone: openstack-keystone: PATCH /v3/credentials accepts unauthorized post-update project_id; EC2-derived tokens bypass delegation scope checkCVE-2026-90460	Red Hat OpenStack Platform 13 (Queens)/openstack-keystone Red Hat OpenStack Platform 16.2/openstack-keystone	Red Hat	High	No fix reported	Not recorded