{"action":"Upgrade keystone to 9.0.1 or later.","affected":[{"fixed":"9.0.1","introduced":"9.0.0"}],"component":"keystone","cve_ids":["CVE-2016-4911"],"ecosystem":"PyPI","epss":0.01402,"exploited":false,"fixed_versions":["9.0.1"],"ghsa_id":"GHSA-f82m-w3p3-cgp3","id":"tcs_01M5KFERDBZV5XQM65PD15HM0T","modified_at":"2024-11-26T18:27:07Z","published_at":"2022-05-17T03:41:03Z","references":["https://osv.dev/vulnerability/GHSA-f82m-w3p3-cgp3","https://nvd.nist.gov/vuln/detail/CVE-2016-4911","https://github.com/openstack/keystone/commit/0d376025bae61bf5ee19d992c7f336b99ac69240","https://github.com/openstack/keystone/commit/ee1dc941042d1f71699971c5c30566af1b348572","https://bugs.launchpad.net/keystone/+bug/1577558","https://github.com/openstack/keystone","https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2016-38.yaml","https://review.openstack.org/#/c/311886","https://security.openstack.org/ossa/OSSA-2016-008.html","http://www.openwall.com/lists/oss-security/2016/05/17/10","http://www.openwall.com/lists/oss-security/2016/05/17/11"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-f82m-w3p3-cgp3","url":"https://osv.dev/vulnerability/GHSA-f82m-w3p3-cgp3"}],"summary":"OpenStack Identity Keystone Improper Access Control"}