Lucene search
+L

4 matches found

OSV
OSV
•added 2026/07/13 3:02 p.m.•15 views

PYSEC-2026-2550 OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean

In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the userenabledinvert configuration option is False the default. The ldaprestomodel method in the UserApi class only performed string-to-boolean conversion when...

7.7CVSS6.1AI score0.00373EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/04/14 8:05 p.m.•41 views

CVE-2026-40683

In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the userenabledinvert configuration option is False the default. The ldaprestomodel method in the UserApi class only performed string-to-boolean conversion when...

7.7CVSS0.00373EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-40683: Access of Resource Using Incompatible Type

In OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the userenabledinvert configuration option is False the default. The ldaprestomodel method in the UserApi class only performed string-to-boolean conversion when...

7.7CVSS5.8AI score0.00373EPSS
SaveExploits0References2
OSV
OSV
•added 2023/02/20 4:15 p.m.•12 views

CVE-2023-25613

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3...

9.8CVSS7.3AI score0.01491EPSS
SaveExploits0References1
Rows per page
Query Builder