106 matches found
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
The s3token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration paste.ini file regardless of the value, which allows remote attackers to conduct...
GHSA-P9WQ-MJH8-Q72M OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
The s3token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration paste.ini file regardless of the value, which allows remote attackers to conduct...
python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware
A context confusion vulnerability was identified in Keystone authtoken middleware shipped in python-keystoneclient before 0.7.0. By doing repeated requests, with sufficient load on the target system, an authenticated user may in certain situations assume another authenticated user's complete...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
PYSEC-2019-197
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
CVE-2013-2167
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
CVE-2013-2166
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
PT-2019-6882
Name of the Vulnerable Software and Affected Versions python-keystoneclient versions 0.2.3 through 0.2.5 Description The issue concerns a middleware memcache signing bypass in the python-keystoneclient. Recommendations For python-keystoneclient versions 0.2.3 through 0.2.5, update to a version...
CVE-2013-2166: Inadequate Encryption Strength
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass...
PT-2019-6881 · Openstack · Python-Keystoneclient
Name of the Vulnerable Software and Affected Versions: python-keystoneclient versions 0.2.3 through 0.2.5 Description: The issue concerns a middleware memcache encryption bypass in the python-keystoneclient. No information is provided about the estimated number of potentially affected devices or...
CVE-2013-2167: Insufficient Verification of Data Authenticity
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass...
Encryption And Signing Bypass
python-keystoneclient is vulnerable to Encryption and Signing Bypass. A flaw was found in the way python-keystoneclient verified data from memcached. Even when the memcachesecuritystrategy setting in /etc/swift/proxy-server.conf was set to MAC to perform signature checking, an attacker on the loc...