Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:keystone:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductKeystone (54be5cb9-7f0d-5cc5-bfca-6220fcd705e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/keystone purl2cpe 2026-06-01 10:17:03.365608
pkg:deb/ubuntu/keystone purl2cpe 2026-06-01 10:17:03.365609
pkg:github/openstack/keystone purl2cpe 2026-06-01 10:17:03.365611
pkg:pypi/keystone purl2cpe 2026-06-01 10:17:03.365612

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2447 vulnerable 2026-06-03 14:47:06.399891 Details available
A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually revoked. This could allow a remote administrator to secretly maintain access for longer than expected.
Published: 2022-09-01T20:30:20.000Z
Updated: 2024-08-03T00:39:07.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1572 vulnerable 2026-06-03 14:31:43.332201 Details available
OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space
Published: 2019-11-12T16:48:15.000Z
Updated: 2024-08-06T19:01:02.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.