https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:40:43.561517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108567 EUVD-2026-108567 2026-10-03T08:40:43.566252+00:00 EUVD-2026-108567 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6391 fkie_cve-2013-6391 2026-10-03T08:40:43.566282+00:00

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.

 https://cve.radiocsirt.org/vuln/ghsa-3fpm-8w39-5p69 GHSA-3fpm-8w39-5p69 2026-10-03T08:40:43.566313+00:00

The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to gain privileges by generating EC2 credentials from a trust-scoped token and using them in an ec2tokens API request.

 https://cve.radiocsirt.org/vuln/gsd-2013-6391 gsd-2013-6391 2026-10-03T08:40:43.566330+00:00 gsd-2013-6391 https://cve.radiocsirt.org/vuln/rhsa-2014:0089 RHSA-2014:0089 — Red Hat Security Advisory: openstack-keystone security and bug fix update 2026-10-03T08:40:43.566340+00:00

Keystone: trust circumvention through EC2-style tokens