Openstack Keystone Vulnerabilities

Openstack Keystone vulnerabilities.

1 September 2022

Authentication Bypass Vulnerability in Keystone by Red Hat
CVE-2022-2447
OpenstackOpenstack-keystone6.6MEDIUM

26 August 2022

Password Complexity Bypass in OpenStack Keystone
CVE-2021-3563
OpenstackKeystone7.4HIGH

6 August 2021

Information Disclosure Vulnerability in OpenStack Keystone by OpenStack
CVE-2021-38155
OpenstackKeystone7.5HIGH

7 May 2020

OAuth1 Access Token Role Assignment Issue in OpenStack Keystone
CVE-2020-12690
OpenstackKeystone8.8HIGH
Privilege Escalation in OpenStack Keystone by Unauthorized Users
CVE-2020-12689
OpenstackKeystone8.8HIGH
Signature Authentication Vulnerability in OpenStack Keystone
CVE-2020-12692
OpenstackKeystone5.4MEDIUM
User Impersonation Vulnerability in OpenStack Keystone by OpenStack
CVE-2020-12691
OpenstackKeystone8.8HIGH

9 December 2019

Data Leakage Vulnerability in OpenStack Keystone API by OpenStack
CVE-2019-19687
OpenstackKeystone8.8HIGH

1 November 2019

OpenStack Keystone and Compute SSL Certificate Validation Flaw
CVE-2013-2255
OpenstackKeystone5.9MEDIUM

17 December 2018

User Enumeration in OpenStack Keystone by OpenStack
CVE-2018-20170
OpenstackKeystone5.3MEDIUM

12 May 2015

Sensitive Information Exposure in OpenStack Identity by OpenStack Foundation
CVE-2015-3646
OpenstackKeystone

3 November 2014

Privilege Escalation in OpenStack Identity by Mismanaged User and Group IDs
CVE-2014-0204
OpenstackKeystone

26 October 2014

Privilege Escalation in OpenStack Identity (Keystone) by Unauthorized Project Access
CVE-2014-3520
OpenstackKeystone

2 October 2014

Configuration Option Leak in OpenStack Identity Keystone
CVE-2014-3621
OpenstackKeystone

25 August 2014

17 June 2014

Privilege Escalation Vulnerability in OpenStack Identity by OpenStack
CVE-2014-3476
OpenstackKeystone

2 June 2014

Denial of Service Vulnerability in OpenStack Identity by OpenStack
CVE-2013-2014
OpenstackKeystone

15 April 2014

Denial of Service in OpenStack Identity V3 API by Large Request Load
CVE-2014-2828
OpenstackKeystone

1 April 2014

Token Revocation Vulnerability in OpenStack Keystone by OpenStack
CVE-2014-2237
OpenstackKeystone

14 December 2013

Privilege Escalation in OpenStack Identity API by OpenStack
CVE-2013-6391
OpenstackKeystone

30 September 2013

Token Revocation Flaw in OpenStack Identity by OpenStack
CVE-2013-4222
OpenstackKeystone

23 September 2013

Token Revocation Bypass in OpenStack Identity by OpenStack
CVE-2013-4294
OpenstackKeystone

20 August 2013

Authentication Bypass in OpenStack Keystone by Anonymous LDAP Binding
CVE-2013-2157
OpenstackKeystone