Skip to content
OpenAdvisories
Medium RHSA-2017:1597 1 CVE

Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 openstack-keystone 1:10.0.1-3.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-keystone 1:10.0.1-3.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-keystone-tests 1:10.0.1-3.el7ost

Vulnerabilities 1

  • Medium 6.8
    CVE-2017-2673

    OpenStack Identity service (keystone) Incorrect Authorization

    An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrat…

    [UNKNOWN] openstack-keystone keystone keystone Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1431715
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1439586
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1597.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-2673
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-2673
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-2673