Skip to content
OpenAdvisories
High RHSA-2019:4358 1 CVE

Red Hat Security Advisory: openstack-keystone security update

Published Sep 16, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 15 openstack:15::el8 openstack-keystone 1:15.0.1-0.20190720060412.5f27c4b.1.el8ost
Red Hat · OpenStack 15 openstack:15::el8 python3-keystone 1:15.0.1-0.20190720060412.5f27c4b.1.el8ost

Vulnerabilities 1

  • High 8.8
    CVE-2019-19687

    OpenStack Keystone Credential Leakage

    OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforce_scope is false. Users with a role on a project are able t…

    keystone keystone Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1781470
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4358.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-19687
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-19687
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-19687
  • article
    https://seclists.org/oss-sec/2019/q4/152
  • article
    https://security.openstack.org/ossa/OSSA-2019-006.html