Openstack Keystone Sårbarheter

Tidslinje

Version

15.04
16.04
14.0.02
14.0.12
15.0.02

Åtgärd

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Utnyttjbarhet

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined8

Åtkomstvektor

Not Defined0
Physical0
Local0
Adjacent0
Network8

Autentisering

Not Defined0
High0
Low6
None2

Användarinteraktion

Not Defined0
Required0
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤62
≤74
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤80
≤96
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k2
<2k4
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k8
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Versions (6): 14, 14.0.1, 15, 15.0, 16, 16.0

Programvarutyp: Cloud Software

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
07/05/20205.95.6OpenStack Keystone EC2 API svag kryptering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-12692
07/05/20207.57.2OpenStack OpenStack Keystone EC2 Credential Masquerade svag kryptering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-12691
07/05/20207.57.2OpenStack Keystone OAuth1 Access Token svag autentisering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-12690
07/05/20207.57.2OpenStack Keystone privilegier eskalering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-12689
09/12/20196.56.5OpenStack Keystone Credentials API credentials informationsgivning$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2019-19687
12/11/20196.46.3OpenStack Keystone förnekande av tjänsten$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2012-1572
01/11/20195.75.6OpenStack Keystone/OpenStack Compute SSL Certificate Validator HTTPSConnections svag autentisering$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-2255
17/12/20185.35.3OpenStack Keystone POST Request tokens Username informationsgivning$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-20170

◂ TidigareÖversiktNästa ▸

Do you need the next level of professionalism?

Upgrade your account now!