Skip to content
OpenAdvisories
Unscored RHSA-2013:0806 1 CVE

Red Hat Security Advisory: openstack-keystone security and bug fix update

Published Sep 15, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 2 openstack:2::el6 openstack-keystone 0:2012.2.4-2.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-keystone-doc 0:2012.2.4-2.el6ost
Red Hat · OpenStack 2 openstack:2::el6 python-keystone 0:2012.2.4-2.el6ost

Vulnerabilities 1

  • Low —
    CVE-2013-2006 Public exploit

    OpenStack Keystone Sensitive information disclosure via log files

    OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

    keystone keystone Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=919526
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=956007
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=956474
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0806.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2006
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2006
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2006