redhat-user-workloads/openstack-keystone vulnerabilities

CVEs whose affected-version data names the redhat-user-workloads/openstack-keystone package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2012-5571Medium· 5.4

13y ago

Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling

A flaw was found in OpenStack Keystone. This vulnerability allows remote authenticated users to bypass intended authorization restrictions. This occurs because OpenStack Keystone does not properly handle EC2 (Elastic Compute Cloud) token…

▾ SunlitRed Hat · openstack-keystoneEPSS 2.1%via CVEORG