CVE-2020-12692

MEDIUM

OpenStack Keystone <15.0.1-16.0.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_confirm
https://security.openstack.org/ossa/OSSA-2020-003.html
Third Party Advisory x_refsource_misc
https://bugs.launchpad.net/keystone/+bug/1872737
Mailing List, Third Party Advisory x_refsource_misc
https://www.openwall.com/lists/oss-security/2020/05/06/4
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/05/07/1
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4480-1/

Scores

CVSS v3 5.4
EPSS 0.0070
EPSS Percentile 48.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-294 CWE-347
Status published
Products (4)
canonical/ubuntu_linux 18.04
openstack/keystone 16.0.0
openstack/keystone < 15.0.1
pypi/keystone 16.0.0.0rc1 - 16.0.0PyPI
Published May 07, 2020
Tracked Since Feb 18, 2026