[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fR_BzkruFTDrxtujMfCmblUPbQ8Pv7AHfUrVdRM1ZnUM":3,"g5a-ex:openstack\u002Fkeystone@*":364,"g5a-family:openstack\u002Fkeystone":366},{"success":4,"data":5},true,{"product":6,"versions":194,"topVulnerabilitiesByEpss":281,"kevVulnerabilities":341,"seoMetadata":342,"meta":361},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":193},"openstack","keystone",86,38,0,"2022-09-01",[14,17,19,21,23,25,27,29,31,33,36,38,40,42,44,46,48,50,52,54,56,58,61,63,65,67,69,71,73,75,77,79,81,83,85,88,90,92,94,97,99,101,103,105,107,110,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.3",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.0",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.1",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.2",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.3",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.4",{"version":34,"cve_count":35,"kev_count":11,"has_kev":16},"12.0.0",1,{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.1",{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.2",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.3",{"version":43,"cve_count":35,"kev_count":11,"has_kev":16},"13.0.0",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"13.0.1",{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"13.0.2",{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.0",{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.1",{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},"14.1.0",{"version":55,"cve_count":35,"kev_count":11,"has_kev":16},"15.0.0",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"15.0.1",{"version":59,"cve_count":60,"kev_count":11,"has_kev":16},"16.0.0",5,{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"16.0.0.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"16.0.1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"16.0.2",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"17.0.0",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"17.0.0.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"17.0.1",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"18.0.0",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"18.0.0.0",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"18.0.1",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.0",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.0.0",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"19.0.1",{"version":86,"cve_count":87,"kev_count":11,"has_kev":16},"2012.1",2,{"version":89,"cve_count":35,"kev_count":11,"has_kev":16},"2012.1.1",{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},"2012.1.2",{"version":93,"cve_count":87,"kev_count":11,"has_kev":16},"2012.1.3",{"version":95,"cve_count":96,"kev_count":11,"has_kev":16},"2012.2",3,{"version":98,"cve_count":35,"kev_count":11,"has_kev":16},"2012.2.1",{"version":100,"cve_count":35,"kev_count":11,"has_kev":16},"2012.2.2",{"version":102,"cve_count":35,"kev_count":11,"has_kev":16},"2012.2.3",{"version":104,"cve_count":35,"kev_count":11,"has_kev":16},"2012.2.4",{"version":106,"cve_count":35,"kev_count":11,"has_kev":16},"2013",{"version":108,"cve_count":109,"kev_count":11,"has_kev":16},"2013.1",6,{"version":111,"cve_count":112,"kev_count":11,"has_kev":16},"2013.1.1",4,{"version":114,"cve_count":96,"kev_count":11,"has_kev":16},"2013.1.2",{"version":116,"cve_count":96,"kev_count":11,"has_kev":16},"2013.1.3",{"version":118,"cve_count":35,"kev_count":11,"has_kev":16},"2013.1.4",{"version":120,"cve_count":35,"kev_count":11,"has_kev":16},"2013.2",{"version":122,"cve_count":35,"kev_count":11,"has_kev":16},"2013.2.1",{"version":124,"cve_count":87,"kev_count":11,"has_kev":16},"2013.2.2",{"version":126,"cve_count":35,"kev_count":11,"has_kev":16},"2013.2.3",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"2013.2.4",{"version":130,"cve_count":96,"kev_count":11,"has_kev":16},"2014.1",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.1",{"version":134,"cve_count":96,"kev_count":11,"has_kev":16},"2014.1.2",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.2.1",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.3",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.4",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"2014.1.5",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.0",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.1",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.2",{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.3",{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},"2014.2.4",{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.0",{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.1",{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.2",{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.3",{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},"2015.1.4",{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.0",{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.1",{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.2",{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.0",{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.2",{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.0",{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.1",{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2",{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.0",{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},"9.2.0",{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},"9.3.0",{"version":188,"cve_count":96,"kev_count":11,"has_kev":16},"juno-1",{"version":190,"cve_count":96,"kev_count":11,"has_kev":16},"juno-2",{"version":192,"cve_count":11,"kev_count":11,"has_kev":16},"juno-3","Keystone by Openstack is a technology product with 86 tracked versions and 38 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":35,"kev_count":11,"has_kev":16},{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},{"version":39,"cve_count":11,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":35,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},{"version":49,"cve_count":11,"kev_count":11,"has_kev":16},{"version":51,"cve_count":11,"kev_count":11,"has_kev":16},{"version":53,"cve_count":11,"kev_count":11,"has_kev":16},{"version":55,"cve_count":35,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":60,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":87,"kev_count":11,"has_kev":16},{"version":89,"cve_count":35,"kev_count":11,"has_kev":16},{"version":91,"cve_count":11,"kev_count":11,"has_kev":16},{"version":93,"cve_count":87,"kev_count":11,"has_kev":16},{"version":95,"cve_count":96,"kev_count":11,"has_kev":16},{"version":98,"cve_count":35,"kev_count":11,"has_kev":16},{"version":100,"cve_count":35,"kev_count":11,"has_kev":16},{"version":102,"cve_count":35,"kev_count":11,"has_kev":16},{"version":104,"cve_count":35,"kev_count":11,"has_kev":16},{"version":106,"cve_count":35,"kev_count":11,"has_kev":16},{"version":108,"cve_count":109,"kev_count":11,"has_kev":16},{"version":111,"cve_count":112,"kev_count":11,"has_kev":16},{"version":114,"cve_count":96,"kev_count":11,"has_kev":16},{"version":116,"cve_count":96,"kev_count":11,"has_kev":16},{"version":118,"cve_count":35,"kev_count":11,"has_kev":16},{"version":120,"cve_count":35,"kev_count":11,"has_kev":16},{"version":122,"cve_count":35,"kev_count":11,"has_kev":16},{"version":124,"cve_count":87,"kev_count":11,"has_kev":16},{"version":126,"cve_count":35,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":96,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":96,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},{"version":188,"cve_count":96,"kev_count":11,"has_kev":16},{"version":190,"cve_count":96,"kev_count":11,"has_kev":16},{"version":192,"cve_count":11,"kev_count":11,"has_kev":16},[282,290,297,303,308,314,320,326,331,336],{"cveId":283,"description":284,"publishedDate":285,"cvssScore":286,"cvssVersion":287,"severity":288,"isKev":16,"epssScore":289},"CVE-2020-12691","An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user. This potentially allows a malicious user to act as the admin on a project another user has the admin role on, which can effectively grant that user global admin privileges.","2020-05-07",8.8,"v3.1","High",0.04918,{"cveId":291,"description":292,"publishedDate":293,"cvssScore":294,"cvssVersion":295,"severity":288,"isKev":16,"epssScore":296},"CVE-2012-4456","The (1) OS-KSADM\u002Fservices and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validate X-Auth-Token, which allow remote attackers to read the roles for an arbitrary user or get, create, or delete arbitrary services.","2012-10-09",7.5,"v2",0.03998,{"cveId":298,"description":299,"publishedDate":300,"cvssScore":60,"cvssVersion":295,"severity":301,"isKev":16,"epssScore":302},"CVE-2013-2014","OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple long requests.","2014-06-02","Medium",0.03271,{"cveId":304,"description":305,"publishedDate":306,"cvssScore":60,"cvssVersion":295,"severity":301,"isKev":16,"epssScore":307},"CVE-2013-0247","OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cause a denial of service (disk consumption) via many invalid token requests that trigger excessive generation of log entries.","2013-02-24",0.03243,{"cveId":309,"description":310,"publishedDate":311,"cvssScore":312,"cvssVersion":295,"severity":288,"isKev":16,"epssScore":313},"CVE-2014-2828","The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka \"authentication chaining.\"","2014-04-15",7.8,0.03216,{"cveId":315,"description":316,"publishedDate":317,"cvssScore":318,"cvssVersion":287,"severity":301,"isKev":16,"epssScore":319},"CVE-2013-0270","A flaw was found in OpenStack Keystone. A remote attacker could exploit this vulnerability by sending a large HTTP request, specifically by providing a long tenant name when requesting a token. This could lead to a denial of service, consuming excessive CPU and memory resources on the affected system.","2013-04-12",6.5,0.03165,{"cveId":321,"description":322,"publishedDate":323,"cvssScore":324,"cvssVersion":295,"severity":301,"isKev":16,"epssScore":325},"CVE-2013-2157","OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.","2013-08-20",4.3,0.03128,{"cveId":327,"description":328,"publishedDate":329,"cvssScore":112,"cvssVersion":295,"severity":301,"isKev":16,"epssScore":330},"CVE-2015-3646","OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.","2015-05-12",0.0288,{"cveId":332,"description":333,"publishedDate":334,"cvssScore":60,"cvssVersion":295,"severity":301,"isKev":16,"epssScore":335},"CVE-2013-4294","The (1) mamcache and (2) KVS token backends in OpenStack Identity (Keystone) Folsom 2012.2.x and Grizzly before 2013.1.4 do not properly compare the PKI token revocation list with PKI tokens, which allow remote attackers to bypass intended access restrictions via a revoked PKI token.","2013-09-23",0.02696,{"cveId":337,"description":338,"publishedDate":339,"cvssScore":294,"cvssVersion":287,"severity":288,"isKev":16,"epssScore":340},"CVE-2021-38155","OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might be leveraged for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected.","2021-08-06",0.02478,[],{"title":343,"metaDescription":344,"keywords":345,"structuredData":346},"Keystone by Openstack - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Keystone by Openstack covering 86 versions with 38 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Keystone vulnerabilities, Keystone security, Keystone CVE, Openstack Keystone, Keystone threat intelligence, Openstack security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":347,"@type":348,"name":349,"description":344,"url":350,"manufacturer":351,"applicationCategory":355,"softwareVersion":356,"mainEntity":357},"https:\u002F\u002Fschema.org","SoftwareApplication","Keystone","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopenstack\u002Fkeystone",{"@type":352,"name":353,"url":354},"Organization","Openstack","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenstack","Security Software","86 versions tracked",{"@type":358,"name":359,"description":360,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Keystone Security Vulnerabilities","Security vulnerabilities affecting Keystone by Openstack",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":362,"apiVersion":363},"2026-10-17T19:26:35.187Z","3.0",{"rows":365,"total":11,"capped":16,"failed":11},[],[367],{"product":368,"cves":87},"keystone_essex"]