The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade keystoneUpgrade python-keystoneclient | Jul 30, 2024 | Apr 15, 2014 |
| Suse | — | Upgrade python3-keystoneclientUpgrade python2-keystoneclient | Feb 4, 2022 | Apr 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub