EUVD-2014-0093

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

OpenStack Python client for Swift lacks X.509 certificate verification, risking man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 17
CVE	CVE-2013-6396	18 Feb 201419:00	–	cve
Cvelist	CVE-2013-6396	18 Feb 201419:00	–	cvelist
Debian CVE	CVE-2013-6396	18 Feb 201419:00	–	debiancve
Fedora	[SECURITY] Fedora 20 Update: python-swiftclient-2.0.2-1.fc20	21 Mar 201409:34	–	fedora
Tenable Nessus	Fedora 20 : python-swiftclient-2.0.2-1.fc20 (2014-3054)	22 Mar 201400:00	–	nessus
Github Security Blog	Python Swift client is vulnerable to Missing SSL Certificate Check	17 May 202204:52	–	github
NVD	CVE-2013-6396	18 Feb 201419:55	–	nvd
OpenVAS	Fedora Update for python-swiftclient FEDORA-2014-3054	25 Mar 201400:00	–	openvas
OpenVAS	Fedora Update for python-swiftclient FEDORA-2014-3054	25 Mar 201400:00	–	openvas
OSV	DEBIAN-CVE-2013-6396	18 Feb 201419:55	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "ad4b62af-8c7c-3068-81dd-99eab41baf71",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "93fd62bc-7385-3371-b391-5a95711e9b74",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2014/02/17/7
bugs	www.bugs.launchpad.net/python-swiftclient/+bug/1199783
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-6396
github	www.github.com/chmouel/python-swiftclient
github	www.github.com/pypa/advisory-database/tree/main/vulns/python-swiftclient/PYSEC-2014-12.yaml
review	www.review.opendev.org/c/openstack/python-swiftclient/+/69187
suse	www.suse.com/security/cve/CVE-2013-6396.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25.8

EPSS0.00137