Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/keystone@2012.2
purl pkg:pypi/keystone@2012.2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2012-20
Aliases:
CVE-2012-5563
GHSA-w66p-78g4-mr7g
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to … There are no reported fixed by versions.
PYSEC-2012-35
Aliases:
CVE-2012-5571
GHSA-qvpr-qm6w-6rcc
OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens when the user role has been removed … There are no reported fixed by versions.
PYSEC-2013-39
Aliases:
CVE-2013-1865
GHSA-22q6-wwq7-2jj9
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which … There are no reported fixed by versions.
This package is not known to fix any advisories.