OpenStack / Keystonemiddleware

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-22797	keystonemiddleware: OpenStack keystonemiddleware: Privilege escalation and user impersonation via forged authentication headers	CRITICAL	9.9	Jan 19, 2026
CVE-2015-7546	openstack-keystone: Improper check of tampered revocated PKI/PKIZ token	HIGH	8.6	Feb 3, 2016
CVE-2015-1852	keystonemiddleware/keystoneclient: S3Token TLS cert verification option not honored	HIGH	8.7	Apr 17, 2015
CVE-2014-7144	python-keystoneclient: TLS certificate verification disabled	HIGH	8.2	Oct 2, 2014

Rows per page

Showing 1 to 4 of 4 CVEs