OpenStack keystonemiddleware güvenlik açıkları (CVE)

OpenStack keystonemiddleware için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
8.3Yüksek
CVE-2026-115642
OpenStack keystonemiddleware

In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privileges.

9.9Kritik
CVE-2026-22797
OpenStack keystonemiddleware; Red Hat Red Hat OpenShift Container Platform 4.17; Red Hat Red Hat OpenShift Container Platform 4.18; Red Hat Red Hat OpenShift Container Platform 4.19

An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The external_oauth2_token middleware fails to sanitize incoming authentication headers before process…