Skip to content
OpenAdvisories
High RHSA-2013:0944 1 CVE

Red Hat Security Advisory: python-keystoneclient security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 python-keystoneclient 1:0.2.3-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 python-keystoneclient-doc 1:0.2.3-2.el6ost

Vulnerabilities 1

  • High 7.5
    CVE-2013-2104

    python-keystoneclient missing expiration check in PKI token validation

    python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.

    python-keystoneclient python-keystoneclient Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=904351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=928558
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=965852
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0944.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-2104
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-2104
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-2104