Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/74726?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/74726?format=api", "vulnerability_id": "VCID-6pst-ch65-jue1", "summary": "OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might be leveraged for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected.", "aliases": [ { "alias": "CVE-2021-38155" }, { "alias": "GHSA-4225-97pr-rr52" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/510155?format=api", "purl": "pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:18.0.0-3%252Bdeb11u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/100459?format=api", "purl": "pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-g2mr-xac1-jue9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:18.0.0-3%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/100505?format=api", "purl": "pkg:deb/debian/keystone@2:19.0.0-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:19.0.0-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/100457?format=api", "purl": "pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:22.0.2-0%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/100461?format=api", "purl": "pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:27.0.0-3%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/100460?format=api", "purl": "pkg:deb/debian/keystone@2:29.0.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:29.0.1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/150040?format=api", "purl": "pkg:pypi/keystone@16.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/150044?format=api", "purl": "pkg:pypi/keystone@17.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@17.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/574184?format=api", "purl": "pkg:pypi/keystone@18.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@18.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/150052?format=api", "purl": "pkg:pypi/keystone@19.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@19.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/574188?format=api", "purl": "pkg:pypi/keystone@20.0.0.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@20.0.0.0rc1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/515852?format=api", "purl": "pkg:deb/debian/keystone@2012.1.1-13%2Bwheezy1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-476j-q5mw-g3bc" }, { "vulnerability": "VCID-4dfd-d2ah-wyfw" }, { "vulnerability": "VCID-4u68-u1rt-dkf3" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-795z-uxdu-hqdd" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-7g3v-a5tn-dycy" }, { "vulnerability": "VCID-7n2d-dh67-z7bv" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-ch28-x82z-qygp" }, { "vulnerability": "VCID-dtzz-ku1w-buhj" }, { "vulnerability": "VCID-dun6-47vx-eqg7" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-gzg2-y3ku-tyb8" }, { "vulnerability": "VCID-hbw7-mk5t-vqb2" }, { "vulnerability": "VCID-hh29-6my3-5yhs" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-j4dq-htwd-pkey" }, { "vulnerability": "VCID-j99r-n3ep-p3dg" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-k1ca-t5sh-fkg7" }, { "vulnerability": "VCID-k74p-n11s-yqgv" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-kd6q-yede-13a8" }, { "vulnerability": "VCID-kde1-j2p8-hfam" }, { "vulnerability": "VCID-q623-eq7z-juc2" }, { "vulnerability": "VCID-qybw-66g5-n3gt" }, { "vulnerability": "VCID-s2r4-peb5-ykee" }, { "vulnerability": "VCID-sjvu-6pfu-k3cx" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-x4zb-hp1p-pybu" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-zzdx-v68n-zkh6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2012.1.1-13%252Bwheezy1" }, { "url": "http://public2.vulnerablecode.io/api/packages/515853?format=api", "purl": "pkg:deb/debian/keystone@2014.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-7g3v-a5tn-dycy" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-dtzz-ku1w-buhj" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-hbw7-mk5t-vqb2" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-j99r-n3ep-p3dg" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2014.1.3-6" }, { "url": "http://public2.vulnerablecode.io/api/packages/515854?format=api", "purl": "pkg:deb/debian/keystone@2:9.0.0-2~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-7g3v-a5tn-dycy" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-dtzz-ku1w-buhj" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-hbw7-mk5t-vqb2" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:9.0.0-2~bpo8%252B1" }, { "url": "http://public2.vulnerablecode.io/api/packages/515855?format=api", "purl": "pkg:deb/debian/keystone@2:10.0.0-9%2Bdeb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-7g3v-a5tn-dycy" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:10.0.0-9%252Bdeb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/516173?format=api", "purl": "pkg:deb/debian/keystone@2:14.2.0-0%2Bdeb10u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-7b5p-zqzm-3few" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-eszc-r2p1-xkcv" }, { "vulnerability": "VCID-hyts-mq72-z7de" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-v6q4-3362-fyde" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:14.2.0-0%252Bdeb10u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/503361?format=api", "purl": "pkg:pypi/keystone@10.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6pst-ch65-jue1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@10.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/12605?format=api", "purl": "pkg:pypi/keystone@12.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@12.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/12606?format=api", "purl": "pkg:pypi/keystone@12.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@12.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/12607?format=api", "purl": "pkg:pypi/keystone@13.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@13.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/12608?format=api", "purl": "pkg:pypi/keystone@13.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@13.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/12609?format=api", "purl": "pkg:pypi/keystone@13.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@13.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/12610?format=api", "purl": "pkg:pypi/keystone@14.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/12611?format=api", "purl": "pkg:pypi/keystone@14.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" }, { "vulnerability": "VCID-zvfa-f3nf-gqh8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/12612?format=api", "purl": "pkg:pypi/keystone@14.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/14678?format=api", "purl": "pkg:pypi/keystone@14.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@14.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/14679?format=api", "purl": "pkg:pypi/keystone@15.0.0.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.0.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14680?format=api", "purl": "pkg:pypi/keystone@15.0.0.0rc2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.0.0rc2" }, { "url": "http://public2.vulnerablecode.io/api/packages/14681?format=api", "purl": "pkg:pypi/keystone@15.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/14682?format=api", "purl": "pkg:pypi/keystone@15.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@15.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14683?format=api", "purl": "pkg:pypi/keystone@16.0.0.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.0.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/14684?format=api", "purl": "pkg:pypi/keystone@16.0.0.0rc2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-u4kn-nadh-wqbk" }, { "vulnerability": "VCID-vr3n-ae3v-mqgz" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.0.0rc2" }, { "url": "http://public2.vulnerablecode.io/api/packages/14685?format=api", "purl": "pkg:pypi/keystone@16.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-72xb-qu9g-wufj" }, { "vulnerability": "VCID-91yw-81v7-jbay" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-kd2c-53va-qbcg" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-xnt4-czce-buhs" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/14686?format=api", "purl": "pkg:pypi/keystone@16.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@16.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/503362?format=api", "purl": "pkg:pypi/keystone@17.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6pst-ch65-jue1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@17.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/574181?format=api", "purl": "pkg:pypi/keystone@17.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@17.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/503363?format=api", "purl": "pkg:pypi/keystone@18.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6pst-ch65-jue1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@18.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/574183?format=api", "purl": "pkg:pypi/keystone@18.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@18.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/503364?format=api", "purl": "pkg:pypi/keystone@19.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6pst-ch65-jue1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@19.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/574187?format=api", "purl": "pkg:pypi/keystone@19.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rc9-36nb-r7bq" }, { "vulnerability": "VCID-5ucj-ubyb-27fx" }, { "vulnerability": "VCID-6pst-ch65-jue1" }, { "vulnerability": "VCID-cage-qr17-fude" }, { "vulnerability": "VCID-g2mr-xac1-jue9" }, { "vulnerability": "VCID-jb9c-1sv4-nqd3" }, { "vulnerability": "VCID-w1ga-74n2-dycq" }, { "vulnerability": "VCID-z3ub-exq4-4qgg" }, { "vulnerability": "VCID-z4z5-3wer-nyfs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/keystone@19.0.0" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-38155", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00737", "scoring_system": "epss", "scoring_elements": "0.73209", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00737", "scoring_system": "epss", "scoring_elements": "0.73246", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01067", "scoring_system": "epss", "scoring_elements": "0.78076", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.01067", "scoring_system": "epss", "scoring_elements": "0.78085", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01067", "scoring_system": "epss", "scoring_elements": "0.78064", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-38155" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38155", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38155" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/openstack/keystone", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openstack/keystone" }, { "reference_url": "https://github.com/openstack/keystone/commit/1b573ae7d1c20e0ebfbde79bbe7538a09589c75d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openstack/keystone/commit/1b573ae7d1c20e0ebfbde79bbe7538a09589c75d" }, { "reference_url": "https://github.com/openstack/keystone/commit/8ab4eb27be4c13c9bab2b3ea700f00a190521bf8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openstack/keystone/commit/8ab4eb27be4c13c9bab2b3ea700f00a190521bf8" }, { "reference_url": "https://github.com/openstack/keystone/commit/ac2631ae33445877094cdae796fbcdce8833a626", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openstack/keystone/commit/ac2631ae33445877094cdae796fbcdce8833a626" }, { "reference_url": "https://launchpad.net/bugs/1688137", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://launchpad.net/bugs/1688137" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38155", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38155" }, { "reference_url": "https://security.openstack.org/ossa/OSSA-2021-003.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.openstack.org/ossa/OSSA-2021-003.html" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/08/10/5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/08/10/5" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992070", "reference_id": "992070", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992070" }, { "reference_url": "https://github.com/advisories/GHSA-4225-97pr-rr52", "reference_id": "GHSA-4225-97pr-rr52", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4225-97pr-rr52" } ], "weaknesses": [ { "cwe_id": 307, "name": "Improper Restriction of Excessive Authentication Attempts", "description": "The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6pst-ch65-jue1" }