Lucene search

K
redhatRedHatRHSA-2019:4358
HistoryDec 19, 2019 - 7:16 p.m.

(RHSA-2019:4358) Important: openstack-keystone security update

2019-12-1919:16:28
access.redhat.com
40

0.018 Low

EPSS

Percentile

88.2%

The OpenStack Identity service (keystone) authenticates and authorizes
OpenStack users by keeping track of users and their permitted activities.
The Identity service supports multiple forms of authentication, including
user name and password credentials, token-based systems, and AWS-style
logins.

Security Fix(es):

  • Credentials API allows non-admin to list and retrieve all users
    credentials (CVE-2019-19687)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.