Red Hat Security Advisory

RHSA-2020:2732

openstack-keystone security update

Released 2020-06-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 openstack-keystone-1:13.0.4-3.el7ost, python-keystone-1:13.0.4-3.el7ost
Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server openstack-keystone-1:13.0.4-3.el7ost, python-keystone-1:13.0.4-3.el7ost

TI-2020-10091 CVE-2020-12691 · GHSA-4427-7f3w-mqv6

MEDIUM 46

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04918 Published 2020-05-06 Partial fix · 15.0.1, 16.0.1 CWE-863

TI-2020-10089 CVE-2020-12689 · GHSA-chgw-36xv-47cw

MEDIUM 41

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01562 Published 2020-05-06 Partial fix · 15.0.1, 16.0.1 CWE-269

TI-2020-10092 CVE-2020-12692 · GHSA-rqw2-hhrf-7936

LOW 26

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00705 Published 2020-05-06 Partial fix · 16.0.0, 15.0.1 CWE-294