{"action":"Upgrade keystone to 15.0.1 or later.","affected":[{"fixed":"15.0.1","introduced":"0"},{"fixed":"16.0.0","introduced":"16.0.0.0rc1"}],"component":"keystone","cve_ids":["CVE-2020-12690"],"ecosystem":"PyPI","epss":0.01896,"exploited":false,"fixed_versions":["15.0.1","16.0.0"],"ghsa_id":"GHSA-6m8p-x4qw-gh5j","id":"tcs_01M5KF3P971YQVXWGE8482RGQS","modified_at":"2024-09-27T18:35:07.141200Z","published_at":"2021-06-09T17:34:09Z","references":["https://osv.dev/vulnerability/GHSA-6m8p-x4qw-gh5j","https://nvd.nist.gov/vuln/detail/CVE-2020-12690","https://bugs.launchpad.net/keystone/+bug/1873290","https://github.com/advisories/GHSA-6m8p-x4qw-gh5j","https://github.com/openstack/keystone","https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2020-54.yaml","https://lists.apache.org/thread.html/re4ffc55cd2f1b55a26e07c83b3c22c3fe4bae6054d000a57fb48d8c2@%3Ccommits.druid.apache.org%3E","https://security.openstack.org/ossa/OSSA-2020-005.html","https://usn.ubuntu.com/4480-1","https://www.openwall.com/lists/oss-security/2020/05/06/6","http://www.openwall.com/lists/oss-security/2020/05/07/3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6m8p-x4qw-gh5j","url":"https://osv.dev/vulnerability/GHSA-6m8p-x4qw-gh5j"}],"summary":"Insufficient Session Expiration in OpenStack Keystone"}