Skip to content
OpenAdvisories

Package · PyPI

python-keystoneclient

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2013-2255

    OpenStack Keystone and other components vulnerable to Improper Certificate Validation

    HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

    OpenStack Keystone Compute keystone Debian PyPI
  • Medium 5.9
    CVE-2014-7144

    OpenStack keystonemiddleware does not verify certificate

    OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote a…

    python-keystoneclient python-keystoneclient python-keystonemiddleware keystonemiddleware Debian Ubuntu PyPI
  • Medium 6.0
    CVE-2014-0105

    python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware

    The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstan…

    keystone python-keystoneclient python-keystoneclient Debian PyPI
  • Medium 4.3
    CVE-2013-2030

    OpenStack Nova uses insecure keystone middleware tmpdir by default

    keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demons…

    python-keystoneclient PyPI