Lucene search

K
ubuntuUbuntuUSN-1851-1
HistoryJun 03, 2013 - 12:00 a.m.

python-keystoneclient vulnerability

2013-06-0300:00:00
ubuntu.com
35

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

Releases

  • Ubuntu 13.04

Packages

  • python-keystoneclient - Client library for OpenStack Identity API

Details

Eoghan Glynn and Alex Meade discovered that python-keystoneclient did not
properly perform expiry checks for the PKI tokens used in Keystone. If
Keystone were setup to use PKI tokens (the default in Ubuntu 13.04), a
previously authenticated user could continue to use a PKI token for longer
than intended.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchpython-keystoneclient< 1:0.2.3-0ubuntu2.2UNKNOWN

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%