Skip to content
OpenAdvisories

Package · PyPI

python-keystoneclient

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2015-1852

    OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks

    The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows r…

    python-keystoneclient python-keystoneclient python-keystonemiddleware keystonemiddleware Debian Ubuntu PyPI
  • High 7.5
    CVE-2013-2104

    python-keystoneclient missing expiration check in PKI token validation

    python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.

    python-keystoneclient python-keystoneclient Debian PyPI