Red Hat Security Advisory

RHSA-2018:2523

openstack-keystone security and bug fix update

Released 2018-08-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 12.0 openstack-keystone-1:12.0.0-6.el7ost, python-keystone-1:12.0.0-6.el7ost, python-keystone-tests-1:12.0.0-6.el7ost

Fixes 1 record

TI-2018-10346 CVE-2018-14432 · GHSA-v25x-mmfh-g7w6

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an…

LOW 27

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects.

CVSS 3.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01597 Published 2018-07-31 Fixed CWE-200