https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:57:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-99272 EUVD-2026-99272 https://cve.radiocsirt.org/vuln/euvd-2026-99272 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3476 <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3476 https://cve.radiocsirt.org/vuln/ghsa-274v-r947-v34r <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> https://cve.radiocsirt.org/vuln/ghsa-274v-r947-v34r https://cve.radiocsirt.org/vuln/gsd-2014-3476 gsd-2014-3476 https://cve.radiocsirt.org/vuln/gsd-2014-3476 https://cve.radiocsirt.org/vuln/pysec-2026-649 <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> <p><strong>Affected:</strong> PyPI: keystone</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> https://cve.radiocsirt.org/vuln/pysec-2026-649 https://cve.radiocsirt.org/vuln/rhsa-2014:0994 <p>openstack-keystone: privilege escalation through trust chained delegation openstack-keystone: Keystone V2 trusts privilege escalation through user supplied project id</p> <p>openstack-keystone: privilege escalation through trust chained delegation openstack-keystone: Keystone V2 trusts privilege escalation through user supplied project id</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0994 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3476 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: keystone</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: keystone</p> <p>OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3476