p PatchFirst

CVE-2021-3563

CVE-2021-3563

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS 9.1 · Critical · EPSS 1.9% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • keystone

    Versions
    • Not-known: Affected

    No fix published

  • keystone Debian:12

    Versions
    • 2:22.0.0-2
    • 2:22.0.2-0+deb12u1
    • 2:22.0.2-0+deb12u2
    • 2:22.0.2-0+deb12u3
    • 2:22.0.2-0+deb12u4
    • 2:22.0.2-0+deb12u5
    • 2:22.0.2-0+deb12u6
    • 2:23.0.0-1
    • 2:23.0.0-2
    • 2:23.0.0-3
    • 2:23.0.0-4
    • 2:23.0.0-5
    • 2:23.0.0-6
    • 2:23.0.0~rc1-1
    • 2:24.0.0-1
    • 2:24.0.0-2
    • 2:24.0.0-3
    • 2:24.0.0~rc1-1
    • 2:25.0.0-1
    • 2:25.0.0-2
    • 2:25.0.0-3
    • 2:26.0.0-1
    • 2:26.0.0-2
    • 2:26.0.0-3
    • 2:26.0.0-4
    • 2:26.0.0~rc1-1
    • 2:26.0.0~rc1-2
    • 2:27.0.0-1
    • 2:27.0.0-2
    • 2:27.0.0-3
    • 2:27.0.0~rc1-1
    • 2:27.0.0~rc1-2
    • 2:28.0.0-1
    • 2:28.0.0-2
    • 2:28.0.0-3
    • 2:28.0.0-4
    • 2:28.0.0-5
    • 2:28.0.0-6
    • 2:28.0.0~rc1-1
    • 2:28.0.0~rc1-2
    • 2:28.0.0~rc1-4
    • 2:29.0.0-1
    • 2:29.0.0-2
    • 2:29.0.0-3
    • 2:29.0.0~rc1-1
    • 2:29.0.0~rc1-2
    • 2:29.0.1-1
    • 2:29.0.1-2
    • 2:29.0.2-1
    • 2:29.0.2-2
    • 2:29.1.0-1
    • 2:30.0.0-1
    • 2:30.0.0-3
    • 2:30.0.0~rc1-1
    • 2:30.0.0~rc1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:23.0.0-3

    Update to 2:23.0.0-3

  • keystone Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:23.0.0-3

    Update to 2:23.0.0-3

  • keystone PyPI

    Versions
    • 12.0.2
    • 12.0.3
    • 13.0.2
    • 13.0.3
    • 13.0.4
    • 14.0.0
    • 14.0.1
    • 14.1.0
    • 14.2.0
    • 15.0.0
    • 15.0.0.0rc1
    • 15.0.0.0rc2
    • 15.0.1
    • 16.0.0
    • 16.0.0.0rc1
    • 16.0.0.0rc2
    • 16.0.1
    • 16.0.2
    • 17.0.0
    • 17.0.0.0rc1
    • 17.0.0.0rc2
    • 17.0.1
    • 18.0.0
    • 18.0.0.0rc1
    • 18.1.0
    • 19.0.0
    • 19.0.0.0rc1
    • 19.0.0.0rc2
    • 19.0.1
    • 20.0.0
    • 20.0.0.0rc1
    • 20.0.1
    • 21.0.0
    • 21.0.0.0rc1
    Affected ranges
    • ECOSYSTEM: ≤ 21.0.0

    No fix published

  • keystone Ubuntu:Pro:16.04:LTS

    Versions
    • 2:8.0.0-0ubuntu1
    • 2:9.0.0~b1-0ubuntu1
    • 2:9.0.0~b2-0ubuntu1
    • 2:9.0.0~b3-0ubuntu1
    • 2:9.0.0~rc1-0ubuntu1
    • 2:9.0.0-0ubuntu1
    • 2:9.0.2-0ubuntu1
    • 2:9.0.2-0ubuntu2
    • 2:9.1.0-0ubuntu1
    • 2:9.2.0-0ubuntu1
    • 2:9.3.0-0ubuntu1
    • 2:9.3.0-0ubuntu2
    • 2:9.3.0-0ubuntu3
    • 2:9.3.0-0ubuntu3.1
    • 2:9.3.0-0ubuntu3.2
    • 2:9.3.0-0ubuntu3.2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:Pro:18.04:LTS

    Versions
    • 2:12.0.0-0ubuntu1
    • 2:13.0.0~b1-0ubuntu1
    • 2:13.0.0~b2-0ubuntu1
    • 2:13.0.0~b3-0ubuntu1
    • 2:13.0.0~rc1-0ubuntu1
    • 2:13.0.0~rc2-0ubuntu1
    • 2:13.0.0-0ubuntu1
    • 2:13.0.1-0ubuntu1
    • 2:13.0.2-0ubuntu1
    • 2:13.0.2-0ubuntu3
    • 2:13.0.4-0ubuntu1
    • 2:13.0.4-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:Pro:20.04:LTS

    Versions
    • 2:16.0.0-0ubuntu1
    • 2:17.0.0~b1~git2019121613.db81fee63-0ubuntu1
    • 2:17.0.0~b2~git2020020513.99733f172-0ubuntu1
    • 2:17.0.0~b3~git2020032415.9f9040257-0ubuntu1
    • 2:17.0.0~b3~git2020032415.9f9040257-0ubuntu2
    • 2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu1
    • 2:17.0.0-0ubuntu0.20.04.1
    • 2:17.0.1-0ubuntu1
    • 2:17.0.1-0ubuntu2
    • 2:17.0.1-0ubuntu2+esm1
    • 2:17.0.1-0ubuntu2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:22.04:LTS

    Versions
    • 2:20.0.0-0ubuntu1
    • 2:20.0.0+git2021120815.2ddf8f321-0ubuntu1
    • 2:20.0.0+git2022011217.771c943ad-0ubuntu1
    • 2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1
    • 2:21.0.0-0ubuntu1
    • 2:21.0.1-0ubuntu1
    • 2:21.0.1-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 2:21.0.1-0ubuntu2.1

    Update to 2:21.0.1-0ubuntu2.1

Original sources

Check your server →