Security Advisories for keystone in pypi
Moderate
5 months ago
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token
pypi
keystone
Moderate
5 months ago
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential
pypi
keystone
High
6 months ago
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean
pypi
keystone
Low
6 months ago
OpenStack Keystone: Restricted application credentials can create EC2 credentials
pypi
keystone
High
11 months ago
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
pypi
keystone
High
over 4 years ago
OpenStack Keystone allows information disclosure during account locking
pypi
keystone
High
over 4 years ago
OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID
pypi
keystone
Moderate
over 4 years ago
OpenStack Keystone does not check signature TTL of the EC2 credential auth method
pypi
keystone
High
over 4 years ago
OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context
pypi
keystone
Moderate
over 4 years ago
OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token
pypi
keystone
Low
over 4 years ago
OpenStack Keystone Sensitive information disclosure via log files
pypi
keystone
High
over 4 years ago
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
pypi
keystone
High
over 4 years ago
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
pypi
keystone
High
over 4 years ago
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
pypi
keystone
High
over 4 years ago
OpenStack Identity (Keystone) DoS through V3 API authentication chaining
pypi
keystone
Moderate
over 4 years ago
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles
pypi
keystone
Moderate
over 4 years ago
OpenStack Keystone intended authorization restrictions bypass
pypi
Keystone
Moderate
over 4 years ago
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user
pypi
keystone
Moderate
over 4 years ago
OpenStack Keystone Token authorization for a user in a disabled tenant is allowed
pypi
Keystone
High
over 4 years ago
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
pypi
keystonemiddleware, keystone
Moderate
over 4 years ago
OpenStack Identity Keystone Exposure of Sensitive Information
pypi
keystone
Moderate
over 4 years ago
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
pypi
keystone
Moderate
over 4 years ago
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
pypi
Keystone
Moderate
over 4 years ago
OpenStack Keystone Denial of Service vulnerability via a large HTTP request
pypi
keystone
Moderate
over 4 years ago
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
pypi
keystone, neutron, cinder, python-keystoneclient