CVE-2021-3563

State: Published
Severity: Not scored
Published: Aug 26, 2022
Updated: Feb 13, 2025
Reserved: May 21, 2021

Description

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity.

Scores

The record has no CVSS score.

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
keystonen/a	Not-knownAffected

References

https://bugs.launchpad.net/ossa/+bug/1901891
https://bugzilla.redhat.com/show_bug.cgi?id=1962908
https://access.redhat.com/security/cve/CVE-2021-3563
https://security-tracker.debian.org/tracker/CVE-2021-3563
https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.