2078 matches found
a10-octavia (>=1.0.0.0a1, <=2.2.0) potentially affected by CVE-2026-42999 via keystone (>=15.0.1, <=18.0.0)
keystone PYPI version =15.0.1, =1.0.0.0a1, =2.2.0 Source cves: CVE-2026-42999 Source advisory: OSV:GHSA-2R23-2G6V-2M5F...
GHSA-WHQR-FGM5-X77Q OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handlescopedtoken function in the mapped...
CVE-2026-44394
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handlescopedtoken function in the mapped...
PYSEC-2026-603
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handlescopedtoken function in the mapped...
a10-octavia (>=1.0.0.0a1, <=2.2.0) potentially affected by CVE-2012-3426 +1 more via keystone (>=15.0.1, <=18.0.0)
keystone PYPI version =15.0.1, =1.0.0.0a1, =2.2.0 Source cves: CVE-2012-3426, CVE-2026-44394 Source advisory: OSV:PYSEC-2026-603...
PYSEC-2026-603
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handlescopedtoken function in the mapped...
PYSEC-2026-599
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application...
PYSEC-2026-601
An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project can escalate to admin by chaining unrestricted application credentials with Keystone trusts. The impersonated token...
a10-octavia (>=1.0.0.0a1, <=2.2.0) potentially affected by CVE-2026-42998 via keystone (>=15.0.1, <=18.0.0)
keystone PYPI version =15.0.1, =1.0.0.0a1, =2.2.0 Source cves: CVE-2026-42998 Source advisory: OSV:PYSEC-2026-599...
a10-octavia (>=1.0.0.0a1, <=2.2.0) potentially affected by CVE-2026-43000 via keystone (>=15.0.1, <=18.0.0)
keystone PYPI version =15.0.1, =1.0.0.0a1, =2.2.0 Source cves: CVE-2026-43000 Source advisory: OSV:PYSEC-2026-601...
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application...
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project can escalate to admin by chaining unrestricted application credentials with Keystone trusts. The impersonated token...
PYSEC-2026-600
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforcecall unconditionally merges the raw JSON request body into the policy enforcement dictionary via policydict.updatejsoninput.copy, overwriting trusted target data that was previously set from...
PYSEC-2026-600
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforcecall unconditionally merges the raw JSON request body into the policy enforcement dictionary via policydict.updatejsoninput.copy, overwriting trusted target data that was previously set from...
PYSEC-2026-599
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application...
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforcecall unconditionally merges the raw JSON request body into the policy enforcement dictionary via policydict.updatejsoninput.copy, overwriting trusted target data that was previously set from...
a10-octavia (>=1.0.0.0a1, <=2.2.0) potentially affected by CVE-2026-42999 via keystone (>=15.0.1, <=18.0.0)
keystone PYPI version =15.0.1, =1.0.0.0a1, =2.2.0 Source cves: CVE-2026-42999 Source advisory: OSV:PYSEC-2026-600...
PYSEC-2026-601
An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project can escalate to admin by chaining unrestricted application credentials with Keystone trusts. The impersonated token...
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application...
UBUNTU-CVE-2026-44394
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original token's expiry to the newly issued token. When a federated user rescopes a token via POST /v3/auth/tokens, the handlescopedtoken function in the mapped...