Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-91cc-hzfb-3kek
SummaryOpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforce_scope is false. Users with a role on a project are able to view any other users' credentials, which could (for example) leak sign-on information for Time-based One Time Passwords (TOTP). Deployments with enforce_scope set to false are affected. (There will be a slight performance impact for the list credentials API once this issue is fixed.)
Aliases
0
alias PYSEC-2019-99
Fixed_packages
0
url pkg:pypi/keystone@16.0.1
purl pkg:pypi/keystone@16.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-bbem-sea4-3ub4
2
vulnerability VCID-c18s-qdf4-3kdh
3
vulnerability VCID-esad-mak2-8bg2
4
vulnerability VCID-fhme-n8v8-ybev
5
vulnerability VCID-kzaw-9ex3-s3d5
6
vulnerability VCID-ngkx-25ft-8qhj
7
vulnerability VCID-nmb8-wq4u-2ug7
8
vulnerability VCID-saua-gpf5-2uhk
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.1
Affected_packages
0
url pkg:pypi/keystone@12.0.2
purl pkg:pypi/keystone@12.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-fhme-n8v8-ybev
5
vulnerability VCID-jc9x-jf2k-t3h9
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-nmb8-wq4u-2ug7
8
vulnerability VCID-nsx2-6bs2-7bcq
9
vulnerability VCID-p1m3-dt99-ruar
10
vulnerability VCID-saua-gpf5-2uhk
11
vulnerability VCID-x7zb-y9a8-tygv
12
vulnerability VCID-xfds-wmnb-qkcj
13
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@12.0.2
1
url pkg:pypi/keystone@12.0.3
purl pkg:pypi/keystone@12.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-fhme-n8v8-ybev
5
vulnerability VCID-jc9x-jf2k-t3h9
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-nmb8-wq4u-2ug7
8
vulnerability VCID-nsx2-6bs2-7bcq
9
vulnerability VCID-p1m3-dt99-ruar
10
vulnerability VCID-saua-gpf5-2uhk
11
vulnerability VCID-x7zb-y9a8-tygv
12
vulnerability VCID-xfds-wmnb-qkcj
13
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@12.0.3
2
url pkg:pypi/keystone@13.0.2
purl pkg:pypi/keystone@13.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-fhme-n8v8-ybev
5
vulnerability VCID-jc9x-jf2k-t3h9
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-ngkx-25ft-8qhj
8
vulnerability VCID-nmb8-wq4u-2ug7
9
vulnerability VCID-nsx2-6bs2-7bcq
10
vulnerability VCID-p1m3-dt99-ruar
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@13.0.2
3
url pkg:pypi/keystone@13.0.3
purl pkg:pypi/keystone@13.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-fhme-n8v8-ybev
5
vulnerability VCID-jc9x-jf2k-t3h9
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-ngkx-25ft-8qhj
8
vulnerability VCID-nmb8-wq4u-2ug7
9
vulnerability VCID-nsx2-6bs2-7bcq
10
vulnerability VCID-p1m3-dt99-ruar
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@13.0.3
4
url pkg:pypi/keystone@13.0.4
purl pkg:pypi/keystone@13.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-fhme-n8v8-ybev
5
vulnerability VCID-jc9x-jf2k-t3h9
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-ngkx-25ft-8qhj
8
vulnerability VCID-nmb8-wq4u-2ug7
9
vulnerability VCID-nsx2-6bs2-7bcq
10
vulnerability VCID-p1m3-dt99-ruar
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@13.0.4
5
url pkg:pypi/keystone@14.0.0
purl pkg:pypi/keystone@14.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-p1m3-dt99-ruar
12
vulnerability VCID-saua-gpf5-2uhk
13
vulnerability VCID-x7zb-y9a8-tygv
14
vulnerability VCID-xfds-wmnb-qkcj
15
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.0.0
6
url pkg:pypi/keystone@14.0.1
purl pkg:pypi/keystone@14.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-p1m3-dt99-ruar
12
vulnerability VCID-saua-gpf5-2uhk
13
vulnerability VCID-x7zb-y9a8-tygv
14
vulnerability VCID-xfds-wmnb-qkcj
15
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.0.1
7
url pkg:pypi/keystone@14.1.0
purl pkg:pypi/keystone@14.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.1.0
8
url pkg:pypi/keystone@14.2.0
purl pkg:pypi/keystone@14.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.2.0
9
url pkg:pypi/keystone@15.0.0.0rc1
purl pkg:pypi/keystone@15.0.0.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.0.0rc1
10
url pkg:pypi/keystone@15.0.0.0rc2
purl pkg:pypi/keystone@15.0.0.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.0.0rc2
11
url pkg:pypi/keystone@15.0.0
purl pkg:pypi/keystone@15.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
13
vulnerability VCID-xfds-wmnb-qkcj
14
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.0
12
url pkg:pypi/keystone@15.0.1
purl pkg:pypi/keystone@15.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-ngkx-25ft-8qhj
8
vulnerability VCID-nmb8-wq4u-2ug7
9
vulnerability VCID-saua-gpf5-2uhk
10
vulnerability VCID-x7zb-y9a8-tygv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.1
13
url pkg:pypi/keystone@16.0.0.0rc1
purl pkg:pypi/keystone@16.0.0.0rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-ngkx-25ft-8qhj
8
vulnerability VCID-nmb8-wq4u-2ug7
9
vulnerability VCID-saua-gpf5-2uhk
10
vulnerability VCID-x7zb-y9a8-tygv
11
vulnerability VCID-xfds-wmnb-qkcj
12
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.0.0rc1
14
url pkg:pypi/keystone@16.0.0.0rc2
purl pkg:pypi/keystone@16.0.0.0rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-kzaw-9ex3-s3d5
7
vulnerability VCID-ngkx-25ft-8qhj
8
vulnerability VCID-nmb8-wq4u-2ug7
9
vulnerability VCID-saua-gpf5-2uhk
10
vulnerability VCID-x7zb-y9a8-tygv
11
vulnerability VCID-xfds-wmnb-qkcj
12
vulnerability VCID-xr4p-a78v-9bb6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.0.0rc2
15
url pkg:pypi/keystone@16.0.0
purl pkg:pypi/keystone@16.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3umd-756n-qqbx
1
vulnerability VCID-91cc-hzfb-3kek
2
vulnerability VCID-bbem-sea4-3ub4
3
vulnerability VCID-c18s-qdf4-3kdh
4
vulnerability VCID-esad-mak2-8bg2
5
vulnerability VCID-fhme-n8v8-ybev
6
vulnerability VCID-jc9x-jf2k-t3h9
7
vulnerability VCID-kzaw-9ex3-s3d5
8
vulnerability VCID-ngkx-25ft-8qhj
9
vulnerability VCID-nmb8-wq4u-2ug7
10
vulnerability VCID-nsx2-6bs2-7bcq
11
vulnerability VCID-saua-gpf5-2uhk
12
vulnerability VCID-x7zb-y9a8-tygv
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.0
References
0
reference_url https://access.redhat.com/errata/RHSA-2019:4358
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:4358
1
reference_url https://bugs.launchpad.net/keystone/+bug/1855080
reference_id
reference_type
scores
url https://bugs.launchpad.net/keystone/+bug/1855080
2
reference_url https://review.opendev.org/#/c/697355/
reference_id
reference_type
scores
url https://review.opendev.org/#/c/697355/
3
reference_url https://review.opendev.org/#/c/697611/
reference_id
reference_type
scores
url https://review.opendev.org/#/c/697611/
4
reference_url https://review.opendev.org/#/c/697731/
reference_id
reference_type
scores
url https://review.opendev.org/#/c/697731/
5
reference_url https://security.openstack.org/ossa/OSSA-2019-006.html
reference_id
reference_type
scores
url https://security.openstack.org/ossa/OSSA-2019-006.html
6
reference_url https://usn.ubuntu.com/4262-1/
reference_id
reference_type
scores
url https://usn.ubuntu.com/4262-1/
7
reference_url http://www.openwall.com/lists/oss-security/2019/12/11/8
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2019/12/11/8
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-91cc-hzfb-3kek