https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:45:33.354819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-100593 EUVD-2026-100593 2026-10-04T18:45:33.359720+00:00 EUVD-2026-100593 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5252 fkie_cve-2014-5252 2026-10-04T18:45:33.359752+00:00

The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.

 https://cve.radiocsirt.org/vuln/ghsa-v8fq-gq9j-3v7h GHSA-v8fq-gq9j-3v7h — OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events 2026-10-04T18:45:33.359784+00:00

Affected: PyPI: keystone

The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.

 https://cve.radiocsirt.org/vuln/gsd-2014-5252 gsd-2014-5252 2026-10-04T18:45:33.359807+00:00 gsd-2014-5252 https://cve.radiocsirt.org/vuln/pysec-2014-108 PYSEC-2014-108 2026-10-04T18:45:33.359819+00:00

Affected: PyPI: keystone

The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.

 https://cve.radiocsirt.org/vuln/rhsa-2014:1121 RHSA-2014:1121 — Red Hat Security Advisory: openstack-keystone security and bug fix update 2026-10-04T18:45:33.359837+00:00

openstack-keystone: revocation events are broken with mysql openstack-keystone: token expiration date stored incorrectly openstack-keystone: domain-scoped tokens don't get revoked

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-5252 UBUNTU-CVE-2014-5252 2026-10-04T18:45:33.359856+00:00

Affected: Ubuntu:14.04:LTS: keystone

The V3 API in OpenStack Identity (Keystone) 2014.1.x before 2014.1.2.1 and Juno before Juno-3 updates the issued_at value for UUID v2 tokens, which allows remote authenticated users to bypass the token expiration and retain access via a verification (1) GET or (2) HEAD request to v3/auth/tokens/.