Red Hat Security Advisory

RHSA-2020:3096

openstack-keystone security update

Released 2020-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 openstack-keystone-1:10.0.3-8.el7ost, python-keystone-1:10.0.3-8.el7ost, python-keystone-tests-1:10.0.3-8.el7ost

TI-2020-10091 CVE-2020-12691 · GHSA-4427-7f3w-mqv6

MEDIUM 46

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04918 Published 2020-05-06 Partial fix · 15.0.1, 16.0.1 CWE-863

TI-2020-10089 CVE-2020-12689 · GHSA-chgw-36xv-47cw

MEDIUM 41

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01562 Published 2020-05-06 Partial fix · 15.0.1, 16.0.1 CWE-269