Read the docs

keystone

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

keystone records in CISA KEV

No keystone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openstack Identity 1 record LOW

Records

1 record in Openstack Identity · all components

TI-2016-04254 CVE-2016-4911 · GHSA-f82m-w3p3-cgp3

The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka)…

Priority LOW 23

The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01402 Published 2016-06-13 Fixed in 9.0.1 CWE-284
Open these records in search →