Search for packages
| purl | pkg:pypi/keystone@18.0.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2015-3646
Aliases: GHSA-jwpw-ppj5-7h4w |
Exposure of Sensitive Information to an Unauthorized Actor OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument … | There are no reported fixed by versions. |
|
CVE-2013-4477
|
Permission Issues The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for … | There are no reported fixed by versions. |
|
GHSA-hhq2-3832-xxcv
Aliases: CVE-2026-43001 |
OpenStack Keystone has an Incorrect Authorization Issue An issue was discovered in OpenStack Keystone 13 through 29. POST /v3/credentials did … | There are no reported fixed by versions. |
|
GHSA-4225-97pr-rr52
Aliases: CVE-2021-38155 |
OpenStack Keystone allows information disclosure during account locking OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before … | There are no reported fixed by versions. |
|
GHSA-gf2q-j2qq-pjf2
Aliases: CVE-2012-3542 |
OpenStack Keystone Allows Remote User Account Creation OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), … | There are no reported fixed by versions. |
|
PYSEC-2012-19
Aliases: CVE-2012-3542 GHSA-gf2q-j2qq-pjf2 |
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary … | There are no reported fixed by versions. |
|
PYSEC-2012-20
Aliases: CVE-2012-5563 GHSA-w66p-78g4-mr7g |
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to … | There are no reported fixed by versions. |
|
PYSEC-2012-34
Aliases: CVE-2012-3426 GHSA-xp97-6w7r-4cjc |
OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, … | There are no reported fixed by versions. |
|
PYSEC-2012-35
Aliases: CVE-2012-5571 GHSA-qvpr-qm6w-6rcc |
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed … | There are no reported fixed by versions. |
|
PYSEC-2013-40
Aliases: CVE-2013-2006 GHSA-rxrm-xvp4-jqvh |
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in … | There are no reported fixed by versions. |
|
PYSEC-2012-34
Aliases: CVE-2012-3426 GHSA-xp97-6w7r-4cjc |
OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, … | There are no reported fixed by versions. |
|
PYSEC-2012-35
Aliases: CVE-2012-5571 GHSA-qvpr-qm6w-6rcc |
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed … | There are no reported fixed by versions. |
|
PYSEC-2013-40
Aliases: CVE-2013-2006 GHSA-rxrm-xvp4-jqvh |
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in … | There are no reported fixed by versions. |
|
PYSEC-2012-20
Aliases: CVE-2012-5563 GHSA-w66p-78g4-mr7g |
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to … | There are no reported fixed by versions. |
|
PYSEC-2012-19
Aliases: CVE-2012-3542 GHSA-gf2q-j2qq-pjf2 |
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary … | There are no reported fixed by versions. |
|
PYSEC-2026-202
Aliases: CVE-2026-33551 GHSA-4phw-6824-6cfp |
An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can … |
Vulnerable |
|
PYSEC-2026-603
Aliases: CVE-2026-44394 GHSA-whqr-fgm5-x77q |
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-1490
Aliases: CVE-2025-65073 GHSA-hcqg-5g63-7j9h |
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization. OpenStack Keystone before 26.0.1, 27.0.0, … |
Vulnerable Vulnerable |
|
PYSEC-2026-599
Aliases: CVE-2026-42998 GHSA-8f8m-wrvr-wcvf |
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-600
Aliases: CVE-2026-42999 GHSA-2r23-2g6v-2m5f |
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-830
Aliases: CVE-2021-38155 GHSA-4225-97pr-rr52 |
OpenStack Keystone allows information disclosure during account locking OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-602
Aliases: CVE-2026-43001 GHSA-hhq2-3832-xxcv |
An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-833
Aliases: CVE-2012-4413 GHSA-mrxv-65rv-6hxq |
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles OpenStack Keystone before 2012.1.3 does not invalidate existing … | There are no reported fixed by versions. |
|
PYSEC-2026-601
Aliases: CVE-2026-43000 GHSA-q623-f4j4-p4xj |
An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-370
Aliases: CVE-2021-3563 GHSA-cc99-whm5-mmq3 |
Openstack Keystone Incorrect Authorization vulnerability A flaw was found in openstack-keystone, only the first 72 characters of an application secret … | There are no reported fixed by versions. |
|
PYSEC-2026-2550
Aliases: CVE-2026-40683 GHSA-pfx2-9x9m-7ghx |
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean In OpenStack Keystone before 28.0.1, the LDAP identity … |
Vulnerable |