7.4

CVE-2021-3563

Exploit

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.

Data is provided by the National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version10.0
Debian ≫ Debian Linux Version11.0
Redhat ≫ Openstack Platform Version10.0
Redhat ≫ Openstack Platform Version13.0
Redhat ≫ Openstack Platform Version16.1
Redhat ≫ Openstack Platform Version16.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.082
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://access.redhat.com/security/cve/CVE-2021-3563
Third Party Advisory
Issue Tracking
https://bugs.launchpad.net/ossa/+bug/1901891
Third Party Advisory
Exploit
VDB Entry
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1962908
Third Party Advisory
Vendor Advisory
Exploit
Issue Tracking
https://security-tracker.debian.org/tracker/CVE-2021-3563
Third Party Advisory
Exploit
Issue Tracking