https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 03:41:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-111881 EUVD-2026-111881 https://cve.radiocsirt.org/vuln/euvd-2026-111881 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3542 <p>OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user&#39;s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</p> <p>OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user&#39;s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-3542 https://cve.radiocsirt.org/vuln/ghsa-gf2q-j2qq-pjf2 <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user&#39;s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</p> <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user&#39;s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</p> https://cve.radiocsirt.org/vuln/ghsa-gf2q-j2qq-pjf2 https://cve.radiocsirt.org/vuln/gsd-2012-3542 gsd-2012-3542 https://cve.radiocsirt.org/vuln/gsd-2012-3542 https://cve.radiocsirt.org/vuln/pysec-2012-19 <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user&#39;s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</p> <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user&#39;s default tenant to the administrative API. NOTE: this identifier was originally incorrectly assigned to an open redirect issue, but the correct identifier for that issue is CVE-2012-3540.</p> https://cve.radiocsirt.org/vuln/pysec-2012-19 https://cve.radiocsirt.org/vuln/rhsa-2012:1378 <p>Keystone: Lack of authorization for adding users to tenants OpenStack-Keystone: role revocation token issues 2012.1.1: fails to validate tokens in Admin API 2012.1.1: fails to raise Unauthorized user error for disabled tenant</p> <p>Keystone: Lack of authorization for adding users to tenants OpenStack-Keystone: role revocation token issues 2012.1.1: fails to validate tokens in Admin API 2012.1.1: fails to raise Unauthorized user error for disabled tenant</p> https://cve.radiocsirt.org/vuln/rhsa-2012:1378