Ubuntu

OpenStack Keystone Vulnerabilities Allow Unauthorized Access

First seen 11 Dec 2025, 18:52 UTC • Ubuntu

•88% similarity •27.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

OpenStack Keystone has multiple vulnerabilities that could allow remote attackers to gain unauthorized access and escalate privileges. The issues include improper handling of ec2tokens and s3tokens APIs and insufficient validation of application secrets. These vulnerabilities could lead to significant security risks for affected systems.

ThreatCluster AI

Attack Flow

8 entities, 13 inferred relationships (STIX 2.1).

Technique (1)

Data Breach

Organization (1)

Ubuntu

Vulnerability (3)

CVE-2021-3563
CVE-2022-2447
CVE-2025-65073

Affected Platform (3)

OpenStack
OpenStack Keystone
Ubuntu Pro

Relationships

CVE-2021-3563 targets OpenStack
CVE-2021-3563 targets OpenStack Keystone
CVE-2021-3563 targets Ubuntu Pro
CVE-2022-2447 targets OpenStack
CVE-2022-2447 targets OpenStack Keystone
CVE-2022-2447 targets Ubuntu Pro
CVE-2025-65073 targets OpenStack
CVE-2025-65073 targets OpenStack Keystone
CVE-2025-65073 targets Ubuntu Pro
Data Breach targets OpenStack
Data Breach targets OpenStack Keystone
Data Breach targets Ubuntu Pro
CVE-2021-3563 related to Ubuntu

Community

Browse all →

Tracked Entities in This Story

Ubuntu OpenStack OpenStack Keystone Ubuntu Pro Data Breach

OpenStack Keystone Vulnerabilities Allow Unauthorized Access

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story