DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack Keystone: Schwachstelle ermöglicht Privilegieneskalation
view advisory published 2026-04-14
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenStack Keystone ausnutzen, um die Authentifizierung zu umgehen und sich unbefugten Zugriff auf das System zu verschaffen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-40683US | — | — | ||
In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user_enabled_invert configuration option is False (… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:39808 vom 2026-07-15external
- EU Vulnerability Database vom 2026-04-14external
- GitHub Security Advisory GHSA-pfx2-9x9m-7ghx vom 2026-04-14external
- Debian Security Advisory DLA-4611 vom 2026-06-01external
- Ubuntu Security Notice USN-8433-1 vom 2026-06-16external
- WID-SEC-W-2026-1116 - CSAF Versionself
- WID-SEC-2026-1116 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan