Debian/keystone: high 7.4
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. T
Action: Upgrade keystone to 2:23.0.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:23.0.0-3 | - |
Fixed versions
| 2:23.0.0-3 |
Sources
- osv: DEBIAN-CVE-2021-3563#Debian:14/keystone
- https://security-tracker.debian.org/tracker/CVE-2021-3563
published · modified · JSON