“Keystone Core security contacts” team

Subscribed bugs


1 → 13 of 13 results First • Previous • Next • Last
Medium
Triaged
#1688137 [OSSA-2021-003] Account name and UUID oracles in account locking (CVE-2021-38155)
OpenStack Identity (keystone) 268
Medium
Confirmed
#1735554 policy cloudsample checks on is_admin_project
OpenStack Identity (keystone) 16
Medium
Triaged
#1791973 User cannot list their own trusts
OpenStack Identity (keystone) 8
Low
Triaged
#1618615 Potential information disclosure in EC2 "credentials"
OpenStack Identity (keystone) 14
Low
Triaged
#1638978 Debug data isn't sanitized
keystoneauth 280
Wishlist
Triaged
#1795800 Timing oracle in core auth plugin simplifies brute-forcing usernames
OpenStack Identity (keystone) 8
Undecided
Fix Committed
#1361360 Eventlet green threads not released back to the pool leading to choking of new requests
Glance icehouse 76
Undecided
Fix Committed
#1361360 Eventlet green threads not released back to the pool leading to choking of new requests
neutron juno 76
Undecided
New
#1613901 String "..%c0%af" causes 500 errors in multiple locations
Glance 20
Undecided
Incomplete
#1613901 String "..%c0%af" causes 500 errors in multiple locations
Cinder 20
Undecided
New
#1892852 memcached socket not released upon lbaas API request
keystonemiddleware 268
Undecided
New
#1970932 Domain Admins possibility for privilege escalation
OpenStack Identity (keystone) 14
Undecided
In Progress
#1977516 When using v3oidcpassword auth and --debug, user password is logged in clear text
keystoneauth 8
1 → 13 of 13 results First • Previous • Next • Last