https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:54:27.586435+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-98319 EUVD-2026-98319 2026-10-03T20:54:27.598617+00:00 EUVD-2026-98319 https://cve.radiocsirt.org/vuln/fkie_cve-2014-2237 fkie_cve-2014-2237 2026-10-03T20:54:27.598711+00:00

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-23x9-8hxr-978c GHSA-23x9-8hxr-978c — OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend 2026-10-03T20:54:27.598795+00:00

Affected: PyPI: keystone

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.

 https://cve.radiocsirt.org/vuln/gsd-2014-2237 gsd-2014-2237 2026-10-03T20:54:27.598844+00:00 gsd-2014-2237 https://cve.radiocsirt.org/vuln/pysec-2014-105 PYSEC-2014-105 2026-10-03T20:54:27.598857+00:00

Affected: PyPI: keystone

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.

 https://cve.radiocsirt.org/vuln/rhsa-2014:0368 RHSA-2014:0368 — Red Hat Security Advisory: openstack-keystone security update 2026-10-03T20:54:27.598877+00:00

Keystone: trust circumvention through EC2-style tokens openstack-keystone: trustee token revocation does not work with memcache backend

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-2237 Withdrawn: UBUNTU-CVE-2014-2237 2026-10-03T20:54:27.598900+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: keystone

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list, which prevents the token from being invalidated by bulk token revocation and allows the trustee to bypass intended access restrictions.