OpenStack Keystone does not check signature TTL of the EC2 credential auth method

🗓️ 24 May 2022 17:17:23Reported by GitHub Advisory DatabaseType

OpenStack Keystone lacks EC2 credential signature TTL chec

Reporter	Title	Published	Views	Family All 36
CVE	CVE-2020-12692	6 May 202023:42	–	cve
Cvelist	CVE-2020-12692	6 May 202023:42	–	cvelist
Debian CVE	CVE-2020-12692	6 May 202023:42	–	debiancve
EUVD	EUVD-2020-0098	7 Oct 202500:30	–	euvd
IBM Security Bulletins	Security Bulletin: Openstack Keystone vulnerabilities affects IBM Spectrum Scale (CVE-2020-12689)	26 Aug 202014:47	–	ibm
NVD	CVE-2020-12692	7 May 202000:15	–	nvd
OpenVAS	Debian: Security Advisory (DSA-4679-1)	8 May 202000:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-4480-1)	2 Sep 202000:00	–	openvas
OSV	DEBIAN-CVE-2020-12692	7 May 202000:15	–	osv
OSV	DSA-4679-1 keystone - security update	6 May 202000:00	–	osv

Vulners

Node

keystone keystoneRange0–15.0.1pip

keystone keystoneRange16.0.0.0rc1–16.0.0pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-12692
bugs	www.bugs.launchpad.net/keystone/+bug/1872737
security	www.security.openstack.org/ossa/OSSA-2020-003.html
openwall	www.openwall.com/lists/oss-security/2020/05/06/4
openwall	www.openwall.com/lists/oss-security/2020/05/07/1
opendev	www.opendev.org/openstack/keystone/commit/ab89ea749013e7f2c46260f68504f5687763e019
github	www.github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2020-56.yaml
usn	www.usn.ubuntu.com/4480-1
github	www.github.com/advisories/GHSA-rqw2-hhrf-7936

27 Sep 2024 21:21Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.4

CVSS 25.5

EPSS0.0014