Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-keystone
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials | keystonekeystonemiddleware | PyPIRed Hat | High | Fix reported | |
| OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context | keystoneRed Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-keystone | PyPIRed Hat | High | Fix reported | |
| OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID | keystoneRed Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-keystone | PyPIRed Hat | High | Fix reported | |
| OpenStack Keystone does not check signature TTL of the EC2 credential auth method | keystoneRed Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-keystone | PyPIRed Hat | Medium | Fix reported | |
| Insufficient Session Expiration in OpenStack Keystone | keystoneRed Hat Enterprise Linux OpenStack Platform 7 (Kilo)/openstack-keystone | PyPIRed Hat | High | Fix reported |