Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1851-1
HistoryJun 03, 2013 - 12:00 a.m.

python-keystoneclient vulnerability

2013-06-0300:00:00
ubuntu.com
36

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

JSON

Releases

  • Ubuntu 13.04

Packages

  • python-keystoneclient - Client library for OpenStack Identity API

Details

Eoghan Glynn and Alex Meade discovered that python-keystoneclient did not
properly perform expiry checks for the PKI tokens used in Keystone. If
Keystone were setup to use PKI tokens (the default in Ubuntu 13.04), a
previously authenticated user could continue to use a PKI token for longer
than intended.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchpython-keystoneclient< 1:0.2.3-0ubuntu2.2UNKNOWN

Related

ubuntucve 1
debiancve 1
veracode 1
redhat 1
openvas 8
osv 2
prion 1
nvd 1
cve 1
nessus 5
cvelist 1
github 1
securityvulns 2
ubuntu 1
fedora 2
ubuntucve
ubuntucve
CVE-2013-2104
2013-05-28 00:00:00
debiancve
debiancve
CVE-2013-2104
2014-01-21 18:55:09
veracode
veracode
Failure In Verification Of PKI Token Expiry
2019-01-15 08:54:53
redhat
redhat
(RHSA-2013:0944) Moderate: python-keystoneclient security and bug fix update
2013-06-12 00:00:00
openvas
openvas
Ubuntu Update for python-keystoneclient USN-1851-1
2013-06-04 00:00:00
Ubuntu: Security Advisory (USN-1851-1)
2013-06-04 00:00:00
Ubuntu Update for keystone USN-1875-1
2013-06-18 00:00:00
osv
osv
python-keystoneclient missing expiration check in PKI token validation
2022-05-17 04:54:13
PYSEC-2014-69
2014-01-21 18:55:00
prion
prion
Code injection
2014-01-21 18:55:00
nvd
nvd
CVE-2013-2104
2014-01-21 18:55:09
cve
cve
CVE-2013-2104
2014-01-21 18:55:09
nessus
nessus
Ubuntu 13.04 : python-keystoneclient vulnerability (USN-1851-1)
2013-06-04 00:00:00
Ubuntu 12.10 / 13.04 : keystone vulnerabilities (USN-1875-1)
2013-06-14 00:00:00
Fedora 18 : openstack-keystone-2012.2.4-5.fc18 (2013-10713)
2013-08-10 00:00:00
cvelist
cvelist
CVE-2013-2104
2014-01-21 18:00:00
github
github
python-keystoneclient missing expiration check in PKI token validation
2022-05-17 04:54:13
securityvulns
securityvulns
[USN-1875-1] OpenStack Keystone vulnerabilities
2013-06-17 00:00:00
OpenStack multiple security vulnerabilities
2013-07-01 00:00:00
ubuntu
ubuntu
OpenStack Keystone vulnerabilities
2013-06-14 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: python-keystoneclient-0.2.3-7.fc19
2013-08-15 02:35:03
[SECURITY] Fedora 18 Update: openstack-keystone-2012.2.4-5.fc18
2013-08-09 17:01:37

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.9%

JSON
Related for USN-1851-1
ubuntucve1debiancve1veracode1redhat1openvas8osv2prion1nvd1cve1nessus5cvelist1github1securityvulns2ubuntu1fedora2