{"action":"Upgrade keystone to 15.0.1 or later.","affected":[{"fixed":"15.0.1","introduced":"0"}],"component":"keystone","cve_ids":["CVE-2020-12692"],"ecosystem":"PyPI","epss":0.00705,"exploited":false,"fixed_versions":["15.0.1"],"ghsa_id":"GHSA-rqw2-hhrf-7936","id":"tcs_01M5KGARD934W6WX97XV31KM75","modified_at":"2026-06-10T17:01:03.770592376Z","published_at":"2020-05-07T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-56","https://www.openwall.com/lists/oss-security/2020/05/06/4","https://bugs.launchpad.net/keystone/+bug/1872737","http://www.openwall.com/lists/oss-security/2020/05/07/1","https://security.openstack.org/ossa/OSSA-2020-003.html","https://usn.ubuntu.com/4480-1/","https://github.com/advisories/GHSA-rqw2-hhrf-7936"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-56","url":"https://osv.dev/vulnerability/PYSEC-2020-56"}],"summary":"An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then u"}