Executive brief
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass
Affected products
- PyPI python-keystoneclient
Junglewise Threat Intelligence
CVE-2013-2166: PYSEC-2019-197 - python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass
CVE-2013-2166 · Severity: low · CVSS 3.1 · Published 2019-12-10
Technologies: python-keystoneclient (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-911 - OpenStack Nova uses insecure keystone middleware tmpdir by default
- PYSEC-2026-656 - OpenStack Keystone and other components vulnerable to Improper Certificate Validation
- PYSEC-2019-161 - python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass
- PYSEC-2015-30 - The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verificat
- PYSEC-2014-71 - OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification whe