Red Hat Security Advisory

RHSA-2020:3102

openstack-keystone security update

Released 2020-07-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 15.0 openstack-keystone-1:15.0.1-0.20200512110437.95b2bbe.el8ost, python3-keystone-1:15.0.1-0.20200512110437.95b2bbe.el8ost

TI-2020-10091 CVE-2020-12691 · GHSA-4427-7f3w-mqv6

MEDIUM 46

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04918 Published 2020-05-06 Partial fix · 15.0.1, 16.0.1 CWE-863

TI-2020-10090 CVE-2020-12690 · GHSA-6m8p-x4qw-gh5j

MEDIUM 42

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01896 Published 2020-05-06 Partial fix · 15.0.1, 16.0.0 CWE-613

TI-2020-10089 CVE-2020-12689 · GHSA-chgw-36xv-47cw

MEDIUM 41

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01562 Published 2020-05-06 Partial fix · 15.0.1, 16.0.1 CWE-269

TI-2020-10092 CVE-2020-12692 · GHSA-rqw2-hhrf-7936

LOW 26

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00705 Published 2020-05-06 Partial fix · 16.0.0, 15.0.1 CWE-294