Поиск уязвимостей
Количество 6
Количество 6
CVE-2014-3476
OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.
CVE-2014-3476
OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.
CVE-2014-3476
OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.
CVE-2014-3476
OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, ...
GHSA-274v-r947-v34r
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
ALT-PU-2014-3224
ALT-PU-2014-3224: package `openstack-keystone` update to version 2014.1.2.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2014-3476 OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles. | CVSS2: 6 | 2% Низкий | больше 12 лет назад |
 | CVE-2014-3476 OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles. | CVSS2: 4.9 | 2% Низкий | больше 12 лет назад |
 | CVE-2014-3476 OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles. | CVSS2: 6 | 2% Низкий | больше 12 лет назад |
| CVE-2014-3476 OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, ... | CVSS2: 6 | 2% Низкий | больше 12 лет назад |
| GHSA-274v-r947-v34r OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege | 2% Низкий | больше 4 лет назад | |
| ALT-PU-2014-3224 ALT-PU-2014-3224: package `openstack-keystone` update to version 2014.1.2.1-alt1 | CVSS2: 6.5 | около 12 лет назад |
Уязвимостей на страницу