Red Hat Security Advisory

RHSA-2014:0089

openstack-keystone security and bug fix update

Released 2014-01-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-keystone-2013.2.1-1.el6ost, openstack-keystone-doc-2013.2.1-1.el6ost, python-keystone-2013.2.1-1.el6ost

Fixes 1 record

TI-2013-05347 CVE-2013-6391 · GHSA-3fpm-8w39-5p69

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse…

LOW 30

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by ge…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02239 Published 2013-12-14 Fixed CWE-269