Skip to content
OpenAdvisories

Package · PyPI

keystone

44 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

44 results · Feed

  • High —
    CVE-2012-4456

    OpenStack Keystone Improper Authentication vulnerability

    The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrar…

    keystone keystone Debian PyPI
  • Medium —
    CVE-2012-4413

    OpenStack Keystone does not invalidate existing tokens when granting or revoking roles

    OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote authenticated users to retain the privileges of the revoked roles.

    keystone keystone Debian PyPI
  • High 7.5
    CVE-2012-3542

    OpenStack Keystone Allows Remote User Account Creation

    OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE: this ide…

    keystone keystone Debian PyPI
  • Medium —
    CVE-2012-3426

    OpenStack Keystone token expiration issues

    OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating new tokens…

    keystone keystone Debian PyPI