Executive brief
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Affected products
- PyPI cinder
- PyPI keystone
- PyPI python-keystoneclient
- PyPI neutron
Junglewise Threat Intelligence
CVE-2013-2255: PYSEC-2026-656 - OpenStack Keystone and other components vulnerable to Improper Certificate Validation
CVE-2013-2255 · Severity: low · CVSS 3.1 · Published 2026-07-02
Technologies: cinder (PyPI), keystone (PyPI), python-keystoneclient (PyPI), neutron (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2493 - OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
- PYSEC-2026-2549 - OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
- PYSEC-2026-1490 - OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
- PYSEC-2026-1693 - OpenStack Neutron can use an incorrect ID during policy enforcement
- PYSEC-2026-1694 - Denial of service in neutron