Lucene search
+L

7 matches found

EUVD
EUVD
added 2026/08/26 12:30 a.m.7 views

EUVD-2026-66121

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be submitted to the token-method authentication path for reauthentication to escape their intended project scope. When an application credential...

7.6CVSS5.3AI score
SaveExploits0References4
NVD
NVD
added 2026/08/25 10:17 p.m.5 views

CVE-2026-80184

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be submitted to the token-method authentication path for reauthentication to escape their intended project scope. When an application credential...

7.6CVSS
SaveExploits0References3
CVE
CVE
added 2026/08/25 9:29 p.m.9 views

CVE-2026-80184

OpenStack Keystone versions before 29.0.3 are affected by a project-scope escape vulnerability in the token-method authentication path. Tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials, or trusts) can be submitted for reauthentication and, whe...

7.6CVSS5.4AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/25 9:29 p.m.15 views

CVE-2026-80184

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be submitted to the token-method authentication path for reauthentication to escape their intended project scope. When an application credential...

7.6CVSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.1 views

PT-2026-81880

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms OAuth1 access tokens, application credentials, trusts could be submitted to the token-method authentication path for reauthentication to escape their intended project scope. When an application credential...

7.6CVSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2021/08/31 3:27 a.m.59 views

New Microsoft Exchange 'ProxyToken' Flaw Lets Attackers Reconfigure Mailboxes

Details have emerged about a now-patched security vulnerability impacting Microsoft Exchange Server that could be weaponized by an unauthenticated attacker to modify server configurations, thus leading to the disclosure of Personally Identifiable Information PII. The issue, tracked as...

7.5CVSS0.9AI score0.98176EPSS
SaveExploits2
ThreatPost
ThreatPost
added 2021/08/30 5:31 p.m.220 views

Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping

A serious security vulnerability in Microsoft Exchange Server that researchers have dubbed ProxyToken could allow an unauthenticated attacker to access and steal emails from a target’s mailbox. Microsoft Exchange uses two websites; one, the front end, is what users connect to in order to access...

9.8CVSS9.6AI score0.99996EPSS
SaveExploits70References5
Rows per page
Query Builder