All vulnerabilities
CVE-2021-3563GHSA-cc99-whm5-mmq3PYSEC-2026-370

Openstack Keystone Incorrect Authorization vulnerability

n/a keystonepipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.1Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)1.86%Chance of exploitation activity in the next 30 days, higher than 79% of CVEs. Scored 27 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published26 Aug 2022Updated 27 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A flaw was found in openstack-keystone, only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity. A patch is available.

Text from CVE List

Affected versions 37

  • keystone, pip<= 21.0.0GitHub
  • keystoneaffected: Not-knownCVE List
  • keystone, PyPIfrom first release, through 21.0.0OSV
  • keystone, PyPI12.0.2OSV
  • keystone, PyPI12.0.3OSV
  • keystone, PyPI13.0.2OSV
  • keystone, PyPI13.0.3OSV
  • keystone, PyPI13.0.4OSV
  • keystone, PyPI14.0.0OSV
  • keystone, PyPI14.0.1OSV
  • keystone, PyPI14.1.0OSV
  • keystone, PyPI14.2.0OSV
  • keystone, PyPI15.0.0OSV
  • keystone, PyPI15.0.0.0rc1OSV
  • keystone, PyPI15.0.0.0rc2OSV
  • keystone, PyPI15.0.1OSV
  • keystone, PyPI16.0.0OSV
  • keystone, PyPI16.0.0.0rc1OSV
  • keystone, PyPI16.0.0.0rc2OSV
  • keystone, PyPI16.0.1OSV
  • keystone, PyPI16.0.2OSV
  • keystone, PyPI17.0.0OSV
  • keystone, PyPI17.0.0.0rc1OSV
  • keystone, PyPI17.0.0.0rc2OSV
  • keystone, PyPI17.0.1OSV
  • keystone, PyPI18.0.0OSV
  • keystone, PyPI18.0.0.0rc1OSV
  • keystone, PyPI18.1.0OSV
  • keystone, PyPI19.0.0OSV
  • keystone, PyPI19.0.0.0rc1OSV
  • keystone, PyPI19.0.0.0rc2OSV
  • keystone, PyPI19.0.1OSV
  • keystone, PyPI20.0.0OSV
  • keystone, PyPI20.0.0.0rc1OSV
  • keystone, PyPI20.0.1OSV
  • keystone, PyPI21.0.0OSV
  • keystone, PyPI21.0.0.0rc1OSV

References 14