CVE-2013-2006

CVE-2013-2006 バージョン: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: openstack-designate-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2026.1, openstack-octavia-2026.1, openstack-manila-2025.2, request-1276, openstack-designate-2025.2, azureml-inference-server-http, openstack-cinder-2026.1, open-webui, semgrep, kserve,...

CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: openstack-designate-2026.1, openstack-keystone-2025.1-fips, openstack-placement-2026.1, openstack-octavia-2026.1, openstack-manila-2025.2, request-1276, openstack-designate-2025.2, azureml-inference-server-http, openstack-cinder-2026.1, open-webui, semgrep, kserve,...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-designate-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-octavia-2026.1, openstack-kolla-toolbox-2026.1, openstack-designate-2025.2, openstack-glance-2025.1-fips, openstack-keystone-2026.1-fips,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-designate-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-octavia-2026.1, openstack-kolla-toolbox-2026.1, openstack-designate-2025.2, openstack-glance-2025.1-fips, openstack-keystone-2026.1-fips,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-designate-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-octavia-2026.1, openstack-kolla-toolbox-2026.1, openstack-designate-2025.2, openstack-glance-2025.1-fips, openstack-keystone-2026.1-fips,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-designate-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-octavia-2026.1, openstack-kolla-toolbox-2026.1, openstack-designate-2025.2, openstack-glance-2025.1-fips, openstack-keystone-2026.1-fips,...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-designate-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-octavia-2026.1, openstack-kolla-toolbox-2026.1, openstack-designate-2025.2, openstack-glance-2025.1-fips, openstack-keystone-2026.1-fips,...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-designate-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-octavia-2026.1, openstack-kolla-toolbox-2026.1, openstack-designate-2025.2, openstack-glance-2025.1-fips, openstack-keystone-2026.1-fips,...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8854-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8854-1 advisory. Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions...

USN-8854-1: OpenStack Keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. CVE-2026-80182 It was discovered that...

USN-8854-1 keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. CVE-2026-80182 It was discovered that...

Linux Distros Unpatched Vulnerability : CVE-2026-90460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAut...

DEBIAN-CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...

CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...

CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...

UBUNTU-CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...

CVE-2026-90460

OpenStack Keystone before 29.0.3 has an authorization flaw in the /v3/credentials API . Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OAuth1 access tokens, and trusts) are not prevented from creating, modifying, or deleting credentials. EC2-derive...

CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...

CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...