OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| keystone(PyPI) | 0 | 26.0.1 | N/A |
| keystone(PyPI) | 27.0.0.0rc1 | 27.0.0 | N/A |
| keystone(PyPI) | 28.0.0.0rc1 | 28.0.0 | N/A |
CVSS Metrics
