Skip to content
OpenAdvisories
Medium RHSA-2014:0409 1 CVE

Red Hat Security Advisory: python-keystoneclient security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Gluster Storage 2 storage:2.1:server:el6 python-keystoneclient 1:0.7.1-2.el6ost
Red Hat · Gluster Storage 2 storage:2.1:server:el6 python-keystoneclient-doc 1:0.7.1-2.el6ost
Red Hat · Gluster Storage 2 storage:2.1:server:el6 python-six 0:1.5.2-1.el6

Vulnerabilities 1

  • Medium 6.0
    CVE-2014-0105

    python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware

    The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstan…

    keystone python-keystoneclient python-keystoneclient Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1082165
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0409.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0105
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0105
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0105