DEBIAN-CVE-2014-0473

The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to bypass CSRF protections by reading the CSRF cookie for anonymous users...

Important: Red Hat Security Advisory: python-keystoneclient security update

Updated python-keystoneclient packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which give...

CVE-2007-1652

CVE-2007-1652 involves an OpenID-based vulnerability where remote attackers can force a user to log into an OpenID-enabled site, disclose the user’s personal information to that site, and add the site to the user’s trusted list via a crafted page related to cached tokens. The connected sources co...