CVE-2021-3563 | BDVDB-2026-183270 Detail

keystone

Description#

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-863 Incorrect Authorization

References#

https://bugs.launchpad.net/ossa/+bug/1901891
https://bugzilla.redhat.com/show_bug.cgi?id=1962908
https://access.redhat.com/security/cve/CVE-2021-3563
https://security-tracker.debian.org/tracker/CVE-2021-3563
https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html

Exploit#

No public exploit known

History#

Version 12022-08-26Record published in the CVE List.
Version 22025-02-13Most recent update recorded in the CVE List.