Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
OpenStack Keystone has an Authorization BypassCVE-2026-42999 · GHSA-2R23-2G6V-2M5FVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone	PyPIRed Hat	Medium	Fix reported	2026-09-10
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credentialCVE-2026-42998 · GHSA-8F8M-WRVR-WCVFVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone	PyPIRed Hat	Medium	Fix reported	2026-09-10
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to booleanCVE-2026-40683 · GHSA-PFX2-9X9M-7GHXVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/openstack-keystone	PyPIRed Hat	High	Fix reported	2026-09-10
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued tokenCVE-2026-44394 · GHSA-WHQR-FGM5-X77QVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone	PyPIRed Hat	Medium	Fix reported	2026-09-10
python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null TerminationCVE-2025-61912 · GHSA-P34H-WQ7J-H5V6Version ranges need review.	python-ldap Red Hat Ansible Automation Platform 2/automation-controller	PyPIRed Hat	Medium	Fix reported	2026-09-10
python-ldap has sanitization bypass in ldap.filter.escape_filter_charsCVE-2025-61911 · GHSA-R7R6-CC7P-4V5MVersion ranges need review.	python-ldap Red Hat Ansible Automation Platform 2/automation-controller	PyPIRed Hat	Medium	Fix reported	2026-09-10
OpenStack's Mistral Client has a local file inclusion vulnerabilityCVE-2021-4472 · GHSA-75HX-6R6J-HW56Version ranges need review.	python-mistralclient Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-aodh-api	PyPIRed Hat	Medium	Fix reported	2026-07-07
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.CVE-2025-65073 · GHSA-HCQG-5G63-7J9HVersion ranges need review.	keystone Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone	PyPIRed Hat	High	Fix reported	2026-07-07
keystone: OpenStack Keystone: Information disclosure via improper handling of domain IDs in role assignment listingsCVE-2026-80183	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone Red Hat OpenStack Platform 16.2/openstack-keystone	Red Hat	Medium	No fix reported	Not recorded