Most recent entries from all

EUVD-2026-261178

fkie_cve-2025-65073

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

GHSA-hcqg-5g63-7j9h — OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorizat…

Affected: PyPI: keystone

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

PYSEC-2026-1490 — OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorizat…

Affected: PyPI: keystone

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

RHSA-2026:1958 — Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update

openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw

UBUNTU-CVE-2025-65073

Affected: Ubuntu:16.04:LTS: heat, Ubuntu:Pro:16.04:LTS: keystone, Ubuntu:16.04:LTS: swift, Ubuntu:18.04:LTS: heat, Ubuntu:Pro:18.04:LTS: keystone, Ubuntu:18.04:LTS: swift, Ubuntu:20.04:LTS: heat, Ubuntu:Pro:20.04:LTS: keystone, Ubuntu:20.04:LTS: swift, Ubuntu:22.04:LTS: heat and 10 more

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

WID-SEC-W-2026-0408 — Red Hat OpenStack Services auf OpenShift (python-eventlet, keystone): Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack Services auf OpenShift ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Berechtigungen zu erweitern.