Search for packages
| purl | pkg:pypi/keystone@2011.3 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2012-19
Aliases: CVE-2012-3542 GHSA-gf2q-j2qq-pjf2 |
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary … | There are no reported fixed by versions. |
|
PYSEC-2012-20
Aliases: CVE-2012-5563 GHSA-w66p-78g4-mr7g |
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to … | There are no reported fixed by versions. |
|
PYSEC-2012-34
Aliases: CVE-2012-3426 GHSA-xp97-6w7r-4cjc |
OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, … | There are no reported fixed by versions. |
|
PYSEC-2012-35
Aliases: CVE-2012-5571 GHSA-qvpr-qm6w-6rcc |
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed … | There are no reported fixed by versions. |
|
PYSEC-2013-40
Aliases: CVE-2013-2006 GHSA-rxrm-xvp4-jqvh |
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in … | There are no reported fixed by versions. |
|
PYSEC-2026-655
Aliases: CVE-2015-3646 GHSA-jwpw-ppj5-7h4w |
OpenStack Keystone Logs Passwords OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which … | There are no reported fixed by versions. |