Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

python-keystoneclient vulnerabilities and exploits

(subscribe to this query)
6
CVSSv2
CVE-2014-0105
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) prior to 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large num...
Openstack Python-keystoneclient 0.2.3Openstack Python-keystoneclient 0.2.2Openstack Python-keystoneclient 0.3.0Openstack Python-keystoneclient 0.3.1Openstack Python-keystoneclient 0.3.2Openstack Python-keystoneclientOpenstack Python-keystoneclient 0.2.4
2.1
CVSSv2
CVE-2013-2013
The user-password-update command in python-keystoneclient prior to 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.
Openstack Python-keystoneclientOpenstack Python-keystoneclient 0.2.2
4.3
CVSSv2
CVE-2014-7144
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x prior to 0.11.0 and 1.x prior to 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote maliciou...
Openstack Keystonemiddleware 1.1.0Openstack Python-keystoneclientOpenstack Keystonemiddleware 1.1.1Openstack Keystonemiddleware 1.0.0
7.5
CVSSv2
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass
Openstack Python-keystoneclientRedhat Openstack 3.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
7.5
CVSSv2
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass
Openstack Python-keystoneclientRedhat Openstack 3.0Fedoraproject Fedora 19Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0
6
CVSSv2
CVE-2015-7546
The identity service in OpenStack Identity (Keystone) prior to 2015.1.3 (Kilo) and 8.0.x prior to 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) prior to 1.5.4 (Kilo) and Liberty prior to 2.3.3 does not properly invalidate authorization tokens when using ...
Openstack KeystonemiddlewareOpenstack KeystoneOracle Solaris 11.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook