Openstack Keystone Incorrect Authorization vulnerability

CAO 7.4CVE-2021-3563 · GHSA-cc99-whm5-mmq3 · PYSEC-2026-370 · Công bố 26/08/2022 · cập nhật 17/06/2026

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
keystone PyPI	`≤ 21.0.0`	Chưa có bản vá
openstack platform redhat	`= 10.0= 13.0= 16.1= 16.2`	Chưa có bản vá

Mô tả

A flaw was found in openstack-keystone, only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity. A patch is available.

Mô tả của NVD

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.

Tham khảo

nvd.nist.gov/vuln/detail/CVE-2021-3563 · ADVISORY
access.redhat.com/security/cve/CVE-2021-3563 · WEB
bugs.launchpad.net/ossa/+bug/1901891 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
pypa/advisory-database · WEB
lists.debian.org/debian-lts-announce/2024/01/msg00007.html · WEB
opendev.org/openstack/keystone · PACKAGE
opendev.org/openstack/keystone/commit/7859ed26003858ebfd9a5e866b43f1a6a9e83dca · WEB
pypi.org/project/keystone · WEB
review.opendev.org/c/openstack/keystone/+/803641 · WEB
review.opendev.org/c/openstack/keystone/+/828595 · WEB
review.opendev.org/c/openstack/keystone/+/856489 · WEB
security-tracker.debian.org/tracker/CVE-2021-3563 · WEB
GitHub Advisory GHSA-cc99-whm5-mmq3 · ADVISORY

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí