Openstack Keystone Incorrect Authorization vulnerability
A flaw was found in openstack-keystone, only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity. A [patch](https://opendev.org/openstack/keystone/commit/7859ed26003858ebfd9a5e866b43f1a6a9e83dca) is available.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-3563US | high7.4OT erhöht | — | ||
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators m… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/CVE-2021-3563WEB
- https://bugs.launchpad.net/ossa/+bug/1901891WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1962908WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2026-370.yamlWEB
- https://lists.debian.org/debian-lts-announce/2024/01/msg00007.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-3563ADVISORY
- https://opendev.org/openstack/keystonePACKAGE
- https://opendev.org/openstack/keystone/commit/7859ed26003858ebfd9a5e866b43f1a6a9e83dcaWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan