Summary
Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens
and s3tokens APIs. A remote attacker could possibly use this issue to
obtain unauthorized access and escalate privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | keystone | 2:25.0.0-0ubuntu1.1 |
| Ubuntu · 25.10 | keystone | 2:28.0.0-0ubuntu1.1 |
References
-
report
https://launchpad.net/bugs/2130629