p PatchFirst

CVE-2025-65073

CVE-2025-65073

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.

CVSS 7.5 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • keystone

    Versions
    • ≥ 0, < 26.0.1: Affected (custom)
    • 27.0.0: Affected (custom)
    • 28.0.0: Affected (custom)

    Update to 26.0.1

  • keystone Debian:12

    Versions
    • 2:22.0.0-2
    Affected ranges
    • ECOSYSTEM: < 2:22.0.2-0+deb12u1

    Update to 2:22.0.2-0+deb12u1

  • keystone Debian:13

    Versions
    • 2:27.0.0-3
    Affected ranges
    • ECOSYSTEM: < 2:27.0.0-3+deb13u1

    Update to 2:27.0.0-3+deb13u1

  • keystone Debian:14

    Versions
    • 2:27.0.0-3
    • 2:28.0.0-1
    • 2:28.0.0~rc1-1
    • 2:28.0.0~rc1-2
    • 2:28.0.0~rc1-4
    Affected ranges
    • ECOSYSTEM: < 2:28.0.0-2

    Update to 2:28.0.0-2

  • keystone PyPI

    Versions
    • 12.0.2
    • 12.0.3
    • 13.0.2
    • 13.0.3
    • 13.0.4
    • 14.0.0
    • 14.0.1
    • 14.1.0
    • 14.2.0
    • 15.0.0
    • 15.0.0.0rc1
    • 15.0.0.0rc2
    • 15.0.1
    • 16.0.0
    • 16.0.0.0rc1
    • 16.0.0.0rc2
    • 16.0.1
    • 16.0.2
    • 17.0.0
    • 17.0.0.0rc1
    • 17.0.0.0rc2
    • 17.0.1
    • 18.0.0
    • 18.0.0.0rc1
    • 18.1.0
    • 19.0.0
    • 19.0.0.0rc1
    • 19.0.0.0rc2
    • 19.0.1
    • 20.0.0
    • 20.0.0.0rc1
    • 20.0.1
    • 21.0.0
    • 21.0.0.0rc1
    • 21.0.1
    • 22.0.0
    • 22.0.0.0rc1
    • 22.0.1
    • 22.0.2
    • 23.0.0
    • 23.0.0.0rc1
    • 23.0.1
    • 23.0.2
    • 24.0.0
    • 24.0.0.0rc1
    • 24.1.0
    • 25.0.0
    • 25.0.0.0rc1
    • 26.0.0
    • 26.0.0.0rc1
    Affected ranges
    • ECOSYSTEM: < 26.0.1

    Update to 26.0.1

  • keystone PyPI

    Versions
    • 27.0.0.0rc1
    Affected ranges
    • ECOSYSTEM: ≥ 27.0.0.0rc1, < 27.0.0

    Update to 27.0.0

  • keystone PyPI

    Versions
    • 28.0.0.0rc1
    Affected ranges
    • ECOSYSTEM: ≥ 28.0.0.0rc1, < 28.0.0

    Update to 28.0.0

  • keystone PyPI

    Versions
    • 12.0.2
    • 12.0.3
    • 13.0.2
    • 13.0.3
    • 13.0.4
    • 14.0.0
    • 14.0.1
    • 14.1.0
    • 14.2.0
    • 15.0.0
    • 15.0.0.0rc1
    • 15.0.0.0rc2
    • 15.0.1
    • 16.0.0
    • 16.0.0.0rc1
    • 16.0.0.0rc2
    • 16.0.1
    • 16.0.2
    • 17.0.0
    • 17.0.0.0rc1
    • 17.0.0.0rc2
    • 17.0.1
    • 18.0.0
    • 18.0.0.0rc1
    • 18.1.0
    • 19.0.0
    • 19.0.0.0rc1
    • 19.0.0.0rc2
    • 19.0.1
    • 20.0.0
    • 20.0.0.0rc1
    • 20.0.1
    • 21.0.0
    • 21.0.0.0rc1
    • 21.0.1
    • 22.0.0
    • 22.0.0.0rc1
    • 22.0.1
    • 22.0.2
    • 23.0.0
    • 23.0.0.0rc1
    • 23.0.1
    • 23.0.2
    • 24.0.0
    • 24.0.0.0rc1
    • 24.1.0
    • 25.0.0
    • 25.0.0.0rc1
    • 26.0.0
    • 26.0.0.0rc1
    • 27.0.0.0rc1
    • 28.0.0.0rc1
    Affected ranges
    • ECOSYSTEM: < 26.0.1 ∪ ≥ 27.0.0.0rc1, < 27.0.0 ∪ ≥ 28.0.0.0rc1, < 28.0.0

    Update to 26.0.1; Update to 27.0.0; Update to 28.0.0

  • heat Ubuntu:16.04:LTS

    Versions
    • 1:5.0.0-0ubuntu1
    • 1:6.0.0~b1-0ubuntu1
    • 1:6.0.0~b2-0ubuntu1
    • 1:6.0.0~b2-0ubuntu2
    • 1:6.0.0~b3-0ubuntu1
    • 1:6.0.0~rc1-0ubuntu1
    • 1:6.0.0-0ubuntu1
    • 1:6.0.0-0ubuntu1.1
    • 1:6.1.0-0ubuntu1
    • 1:6.1.1-0ubuntu1
    • 1:6.1.2-0ubuntu1
    • 1:6.1.2-0ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:Pro:16.04:LTS

    Versions
    • 2:8.0.0-0ubuntu1
    • 2:9.0.0~b1-0ubuntu1
    • 2:9.0.0~b2-0ubuntu1
    • 2:9.0.0~b3-0ubuntu1
    • 2:9.0.0~rc1-0ubuntu1
    • 2:9.0.0-0ubuntu1
    • 2:9.0.2-0ubuntu1
    • 2:9.0.2-0ubuntu2
    • 2:9.1.0-0ubuntu1
    • 2:9.2.0-0ubuntu1
    • 2:9.3.0-0ubuntu1
    • 2:9.3.0-0ubuntu2
    • 2:9.3.0-0ubuntu3
    • 2:9.3.0-0ubuntu3.1
    • 2:9.3.0-0ubuntu3.2
    • 2:9.3.0-0ubuntu3.2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swift Ubuntu:16.04:LTS

    Versions
    • 2.5.0-0ubuntu1
    • 2.7.0-0ubuntu2
    • 2.7.0-0ubuntu2.1
    • 2.7.1-0ubuntu1
    • 2.7.1-0ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heat Ubuntu:18.04:LTS

    Versions
    • 1:9.0.0-0ubuntu1
    • 1:10.0.0~b1-0ubuntu1
    • 1:10.0.0~b2-0ubuntu1
    • 1:10.0.0-0ubuntu1.1
    • 1:10.0.1-0ubuntu1
    • 1:10.0.1-0ubuntu2
    • 1:10.0.2-0ubuntu1
    • 1:10.0.2-0ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:Pro:18.04:LTS

    Versions
    • 2:12.0.0-0ubuntu1
    • 2:13.0.0~b1-0ubuntu1
    • 2:13.0.0~b2-0ubuntu1
    • 2:13.0.0~b3-0ubuntu1
    • 2:13.0.0~rc1-0ubuntu1
    • 2:13.0.0~rc2-0ubuntu1
    • 2:13.0.0-0ubuntu1
    • 2:13.0.1-0ubuntu1
    • 2:13.0.2-0ubuntu1
    • 2:13.0.2-0ubuntu3
    • 2:13.0.4-0ubuntu1
    • 2:13.0.4-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swift Ubuntu:18.04:LTS

    Versions
    • 2.15.1-0ubuntu3
    • 2.16.0-0ubuntu1
    • 2.16.0-0ubuntu2
    • 2.17.0-0ubuntu1
    • 2.17.1-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heat Ubuntu:20.04:LTS

    Versions
    • 1:13.0.0-0ubuntu1
    • 1:14.0.0~b1~git2019121613.7b606461e-0ubuntu1
    • 1:14.0.0~b2~git2020021413.94bdcd8c9-0ubuntu2
    • 1:14.0.0~b3~git2020032414.d8354d908-0ubuntu1
    • 1:14.0.0~b3~git2020041012.2ef9f4bf3-0ubuntu1
    • 1:14.0.0-0ubuntu0.20.04.1
    • 1:14.1.0-0ubuntu1
    • 1:14.2.0-0ubuntu1
    • 1:14.2.0-0ubuntu1.1
    • 1:14.2.0-0ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:Pro:20.04:LTS

    Versions
    • 2:16.0.0-0ubuntu1
    • 2:17.0.0~b1~git2019121613.db81fee63-0ubuntu1
    • 2:17.0.0~b2~git2020020513.99733f172-0ubuntu1
    • 2:17.0.0~b3~git2020032415.9f9040257-0ubuntu1
    • 2:17.0.0~b3~git2020032415.9f9040257-0ubuntu2
    • 2:17.0.0~b3~git2020041013.7bb6314e4-0ubuntu1
    • 2:17.0.0-0ubuntu0.20.04.1
    • 2:17.0.1-0ubuntu1
    • 2:17.0.1-0ubuntu2
    • 2:17.0.1-0ubuntu2+esm1
    • 2:17.0.1-0ubuntu2+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • swift Ubuntu:20.04:LTS

    Versions
    • 2.23.0-0ubuntu1
    • 2.23.1-0ubuntu1
    • 2.24.0~git2019121715.e890b0f0f-0ubuntu1
    • 2.24.0-0ubuntu1
    • 2.24.1~git2020032711.712bf3c9f-0ubuntu2
    • 2.24.1~git2020041316.a495f1e32-0ubuntu1
    • 2.25.0-0ubuntu0.20.04.1
    • 2.25.1-0ubuntu1
    • 2.25.2-0ubuntu1
    • 2.25.2-0ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • heat Ubuntu:22.04:LTS

    Versions
    • 1:17.0.0-0ubuntu1
    • 1:17.0.0+git2021120816.fe8fba8c9-0ubuntu2
    • 1:17.0.0+git2022011216.9af3af156-0ubuntu1
    • 1:17.0.0+git2022011216.9af3af156-0ubuntu3
    • 1:17.0.1+git2022030311.968969b99-0ubuntu1
    • 1:18.0.0-0ubuntu1
    • 1:18.0.0-0ubuntu1.1
    • 1:18.0.0-0ubuntu1.2
    • 1:18.0.1-0ubuntu1
    • 1:18.0.1-0ubuntu1.1
    • 1:18.0.1-0ubuntu1.2
    • 1:18.0.1-0ubuntu1.3
    • 1:18.0.1-0ubuntu1.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:22.04:LTS

    Versions
    • 2:20.0.0-0ubuntu1
    • 2:20.0.0+git2021120815.2ddf8f321-0ubuntu1
    • 2:20.0.0+git2022011217.771c943ad-0ubuntu1
    • 2:20.0.0+git2022030313.a3fc9e7c3-0ubuntu1
    • 2:21.0.0-0ubuntu1
    • 2:21.0.1-0ubuntu1
    • 2:21.0.1-0ubuntu2
    Affected ranges
    • ECOSYSTEM: < 2:21.0.1-0ubuntu2.1

    Update to 2:21.0.1-0ubuntu2.1

  • swift Ubuntu:22.04:LTS

    Versions
    • 2.28.0+git2021090911.5d52afbe4-0ubuntu1
    • 2.28.0+git2021120815.1859f2e16-0ubuntu1
    • 2.28.0+git2021121320.876377435-0ubuntu1
    • 2.28.0+git2022011309.32da73f5c-0ubuntu1
    • 2.29.0+git2022030314.3ff3076ce-0ubuntu1
    • 2.29.0+git2022030314.3ff3076ce-0ubuntu2
    • 2.29.1-0ubuntu1
    • 2.29.2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2.29.2-0ubuntu1.1

    Update to 2.29.2-0ubuntu1.1

  • heat Ubuntu:24.04:LTS

    Versions
    • 1:21.0.0-0ubuntu2
    • 1:21.0.0-0ubuntu3
    • 1:21.0.0+git2024011916.2df46d4c-0ubuntu1
    • 1:22.0.0~rc1-0ubuntu1
    • 1:22.0.0-0ubuntu1
    • 1:22.0.0-0ubuntu2
    • 1:22.0.1-0ubuntu1
    • 1:22.0.1-0ubuntu1.1
    • 1:22.0.1-0ubuntu1.2
    • 1:22.0.1-0ubuntu1.3
    • 1:22.0.1-0ubuntu1.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • keystone Ubuntu:24.04:LTS

    Versions
    • 2:24.0.0-0ubuntu1
    • 2:24.0.0+git2024011916.adfa92b4-0ubuntu1
    • 2:25.0.0~rc1-0ubuntu1
    • 2:25.0.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2:25.0.0-0ubuntu1.1

    Update to 2:25.0.0-0ubuntu1.1

  • swift Ubuntu:24.04:LTS

    Versions
    • 2.32.0+git2023090714.8ce961ed-0ubuntu1
    • 2.32.0+git2024021508.3aba22fd-0ubuntu1
    • 2.32.0+git2024030809.4135133a-0ubuntu1
    • 2.33.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2.33.0-0ubuntu1.1

    Update to 2.33.0-0ubuntu1.1

  • heat Ubuntu:25.10

    Versions
    • 1:24.0.0-0ubuntu1
    • 1:25.0.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →