[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZTsQQQtoa54zjw7L63e5kS-G9nlPA0BzffrZ8ID7x9I":3,"g5a-risk:CVE-2021-38155":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":72,"weaknesses":73,"weaknessesCount":48,"isActivelyExploited":82,"cisaInfo":26,"otxData":26,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":131,"notableEvents":132},"CVE-2021-38155","What is CVE-2021-38155?","OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might be leveraged for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected.","OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during accou...","2021-08-06T21:15:06.687","2024-01-21T23:15:43.93",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.02478,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"openstack","keystone","*","cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*",1,[50,57,63,67],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2021\u002F08\u002F10\u002F5","Openwall",[54,55,56],"Mailing List","Patch","Third Party Advisory",{"url":58,"source":59,"tags":60},"https:\u002F\u002Flaunchpad.net\u002Fbugs\u002F1688137","Launchpad",[61,62,55,56],"Exploit","Issue Tracking",{"url":64,"source":65,"tags":66},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F01\u002Fmsg00007.html","Debian",[],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fsecurity.openstack.org\u002Fossa\u002FOSSA-2021-003.html","Openstack",[55,71],"Vendor Advisory",4,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-307","Improper Restriction of Excessive Authentication Attempts","The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.","","Draft","Base","Simple",false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2021-38155? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-38155, a high severity cyber security vulnerability from 2021. OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x be...","CVE-2021-38155, CVE-2021-38155 vulnerability, CVE-2021-38155 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, openstack security, keystone vulnerability","\u002Fwhat-is\u002Fcve-2021-38155",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-38155","Cybersecurity","CVE-2021-38155, CVE-2021-38155 vulnerability, CVE-2021-38155 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":26,"Negate":26,"Nodes":111},[112],{"Operator":113,"Negate":26,"CPEMatch":114},"OR",[115,119,123,127],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":117,"VersionEndExcluding":118,"VersionEndIncluding":26},"64EC21DE-CE8B-4F59-A3D4-0A6F50CC94C3","10.0.0","16.0.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":121,"VersionEndExcluding":122,"VersionEndIncluding":26},"CBD90FD4-F74A-4B50-984B-88AC5053C72D","17.0.0","17.0.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":125,"VersionEndExcluding":126,"VersionEndIncluding":26},"3EB12E55-F484-49F2-BFBF-6BA81D8645C6","18.0.0","18.0.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"E814845D-8600-4214-A9E4-7C8A330CC144","19.0.0","19.0.1",[],[],{"lastModified":11,"cacheTime":134,"version":32},1792265369655,{"score":136,"band":137,"action":138,"scoredAt":139},48,"Medium","Plan remediation","2026-10-16T06:51:45.26723+00:00"]