Grzegorz Grasza

**Name of the Vulnerable Software and Affected Versions** OpenStack Keystone versions prior to 29.0.3 **Description** Tokens obtained through OAuth1 access tokens, application credentials, or trust-scoped authentication can be used to create new long-lived credentials or authorize new delegations. These new credentials persist independently and outlive the original token used to obtain them. This occurs because delegation restrictions are not consistently applied across all delegated token types, allowing an OAuth1-scoped token to create application credentials or authorize OAuth1 request tokens, even though such operations are restricted for other delegated token types. **Recommendations** Update OpenStack Keystone to version 29.0.3 or later.

**Name of the Vulnerable Software and Affected Versions** OpenStack (affected versions not specified) **Description** An issue exists in OpenStack’s keystonemiddleware component that could allow for privilege escalation or impersonation. An authenticated attacker may be able to elevate their privileges or assume the identity of another user by forging identity headers, such as `X-Is-Admin-Project`, `X-Roles`, or `X-User-Id`, within external OAuth2 tokens. The issue allows users to ‘ask’ for root access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** OpenStack Barbican (affected versions not specified) **Description** A credentials leak flaw was found in OpenStack Barbican, allowing a local authenticated attacker to read the configuration file and gain access to sensitive credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.