← Voltar para CVEs

CVE-2021-3563

HIGH

7.4

Descricao

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.

Detalhes CVE

Pontuacao CVSS v3.17.4

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Vetor de ataqueNETWORK

ComplexidadeHIGH

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado8/26/2022

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

debian:debian_linuxopenstack:keystoneredhat:openstack_platform

Fraquezas (CWE)

CWE-863CWE-863

Referencias

https://access.redhat.com/security/cve/CVE-2021-3563(secalert@redhat.com)

https://bugs.launchpad.net/ossa/+bug/1901891(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=1962908(secalert@redhat.com)

https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html(secalert@redhat.com)

https://security-tracker.debian.org/tracker/CVE-2021-3563(secalert@redhat.com)

https://access.redhat.com/security/cve/CVE-2021-3563(af854a3a-2127-422b-91ae-364da2661108)

https://bugs.launchpad.net/ossa/+bug/1901891(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=1962908(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html(af854a3a-2127-422b-91ae-364da2661108)

https://security-tracker.debian.org/tracker/CVE-2021-3563(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.