| Package | Affected versions | Patched versions |
|---|---|---|
| keystone | ≥ 10.0.0, < 10.0.2≥ 11.0.0, < 11.0.1≥ 9.0.0, ≤ 9.3.0≥ 9.0.0, < 10.0.2 | 10.0.211.0.1 |
| openstack | = 10= 9 |
An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free