Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/keystone@2012.1
purl pkg:pypi/keystone@2012.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
PYSEC-2012-19
Aliases:
CVE-2012-3542
GHSA-gf2q-j2qq-pjf2
OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary … There are no reported fixed by versions.
PYSEC-2012-34
Aliases:
CVE-2012-3426
GHSA-xp97-6w7r-4cjc
OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, … There are no reported fixed by versions.
PYSEC-2012-35
Aliases:
CVE-2012-5571
GHSA-qvpr-qm6w-6rcc
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed … There are no reported fixed by versions.
PYSEC-2026-832
Aliases:
CVE-2012-4456
GHSA-mf98-r2gf-2x3w
OpenStack Keystone Improper Authentication vulnerability The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-gf2q-j2qq-pjf2
OpenStack Keystone Allows Remote User Account Creation OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), … CVE-2012-3542
CVE-2012-3542
OpenStack Keystone Allows Remote User Account Creation OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), … GHSA-gf2q-j2qq-pjf2