7.4

CVE-2021-3563

Exploit
A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 10.0
Debian ≫ Debian Linux Version 11.0
Redhat ≫ Openstack Platform Version 10.0
Redhat ≫ Openstack Platform Version 13.0
Redhat ≫ Openstack Platform Version 16.1
Redhat ≫ Openstack Platform Version 16.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.35% 0.687
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html
https://access.redhat.com/security/cve/CVE-2021-3563
Third Party Advisory
Issue Tracking
https://bugs.launchpad.net/ossa/+bug/1901891
Third Party Advisory
Exploit
VDB Entry
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1962908
Third Party Advisory
Vendor Advisory
Exploit
Issue Tracking
https://security-tracker.debian.org/tracker/CVE-2021-3563
Third Party Advisory
Exploit
Issue Tracking