CVEvulnerability
CVE-2021-3563
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-08-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-863
Description
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.
Affected configurations
• openstack keystone
• debian debian linux 10.0
• debian debian linux 11.0
• redhat openstack platform 10.0
• redhat openstack platform 13.0
• redhat openstack platform 16.1
• redhat openstack platform 16.2
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://access.redhat.com/security/cve/CVE-2021-3563 Issue Tracking, Third Party Advisory
- https://bugs.launchpad.net/ossa/+bug/1901891 Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1962908 Exploit, Issue Tracking, Third Party Advisory, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html lists.debian.org
- https://security-tracker.debian.org/tracker/CVE-2021-3563 Exploit, Issue Tracking, Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-3563 Issue Tracking, Third Party Advisory
- https://bugs.launchpad.net/ossa/+bug/1901891 Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1962908 Exploit, Issue Tracking, Third Party Advisory, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html lists.debian.org
- https://security-tracker.debian.org/tracker/CVE-2021-3563 Exploit, Issue Tracking, Third Party Advisory