OpenStack Keystone 2013.1.4

CPE Details

OpenStack Keystone 2013.1.4
2013.1.4
2014-04-01
21h36 +00:00
2014-05-05
14h56 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:openstack:keystone:2013.1.4:*:*:*:*:*:*:*

Informations

Vendor

openstack

Product

keystone

Version

2013.1.4

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-3563 2022-08-26 15h25 +00:00 A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.
7.4
Haute
CVE-2014-2237 2014-03-31 23h00 +00:00 The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.
5