Skip to content
OpenAdvisories
High RHSA-2020:3102 4 CVEs

Red Hat Security Advisory: openstack-keystone security update

Published Sep 14, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 15 openstack:15::el8 openstack-keystone 1:15.0.1-0.20200512110437.95b2bbe.el8ost
Red Hat · OpenStack 15 openstack:15::el8 python3-keystone 1:15.0.1-0.20200512110437.95b2bbe.el8ost

Vulnerabilities 4

  • High 8.8
    CVE-2020-12689

    OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context

    An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope (trust/oauth/application credential) can create an EC2 credential with an escalated permission, such as obtaining admin while the user is on…

    keystone keystone keystone Debian Ubuntu PyPI
  • High 8.8
    CVE-2020-12690

    Insufficient Session Expiration in OpenStack Keystone

    An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignme…

    keystone keystone keystone Debian Ubuntu PyPI
  • High 8.8
    CVE-2020-12691

    OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID

    An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowi…

    keystone keystone keystone Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2020-12692

    OpenStack Keystone does not check signature TTL of the EC2 credential auth method

    An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of …

    keystone keystone keystone Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830395
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1830396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1833164
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3102.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-12689
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-12689
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-12689
  • article
    https://security.openstack.org/ossa/OSSA-2020-004.html
  • report
    https://access.redhat.com/security/cve/CVE-2020-12690
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-12690
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-12690
  • article
    https://security.openstack.org/ossa/OSSA-2020-005.html
  • report
    https://access.redhat.com/security/cve/CVE-2020-12691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-12691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-12691
  • report
    https://access.redhat.com/security/cve/CVE-2020-12692
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-12692
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-12692
  • article
    https://security.openstack.org/ossa/OSSA-2020-003.html