Debian/keystone: high 8.8
OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforc
Action: Upgrade keystone to 2:16.0.0-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:16.0.0-5 | - |
Fixed versions
| 2:16.0.0-5 |
Sources
- osv: DEBIAN-CVE-2019-19687#Debian:14/keystone
- https://security-tracker.debian.org/tracker/CVE-2019-19687
published · modified · JSON