PyPI/keystone CVE-2021-3563: critical 9.1, EPSS 1.86%
Openstack Keystone Incorrect Authorization vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 21.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cc99-whm5-mmq3
- https://nvd.nist.gov/vuln/detail/CVE-2021-3563
- https://access.redhat.com/security/cve/CVE-2021-3563
- https://bugs.launchpad.net/ossa/+bug/1901891
- https://bugzilla.redhat.com/show_bug.cgi?id=1962908
- https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html
- https://opendev.org/openstack/keystone
- https://opendev.org/openstack/keystone/commit/7859ed26003858ebfd9a5e866b43f1a6a9e83dca
- https://review.opendev.org/c/openstack/keystone/+/803641
- https://review.opendev.org/c/openstack/keystone/+/828595
- https://review.opendev.org/c/openstack/keystone/+/856489
- https://security-tracker.debian.org/tracker/CVE-2021-3563
CVE-2021-3563 · published · modified · JSON