HIGH 7.5 PyPI
GHSA-4rrr-j7ff-r844 · CVE-2013-2104, PYSEC-2014-69 python-keystoneclient missing expiration check in PKI token validation
Modified: 10/25/2024
package
PyPI / python-keystoneclient
pkg:pypi/python-keystoneclient
MEDIUM 5.9 PyPI
GHSA-7f2c-vp52-gmfw · CVE-2014-7144, PYSEC-2014-26 OpenStack keystonemiddleware does not verify certificate
Modified: 9/27/2024
LOW 2.9 PyPI
GHSA-8q2m-pwxf-jc7g · CVE-2013-2013, PYSEC-2013-24 python-keystoneclient unsecure user password update
Modified: 10/16/2024
CRITICAL 9.8 PyPI
GHSA-9vg3-cf92-h2h7 · CVE-2013-2167, PYSEC-2019-161 Insufficient Verification of Data Authenticity in python-keystoneclient
Modified: 10/24/2024
CRITICAL 9.8 PyPI
GHSA-c3xq-cj8f-7829 · CVE-2013-2166, PYSEC-2019-197 Inadequate Encryption Strength in python-keystoneclient
Modified: 10/25/2024
MEDIUM 6.0 PyPI
GHSA-gwvq-rgqf-993f · CVE-2014-0105, PYSEC-2014-70 python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware
Modified: 10/25/2024
HIGH 7.5 PyPI
GHSA-p9wq-mjh8-q72m · CVE-2015-1852, PYSEC-2015-30 OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
Modified: 9/27/2024
MEDIUM 4.3 PyPI
GHSA-pxxv-rv32-2qgv · CVE-2013-2030 OpenStack Nova uses insecure keystone middleware tmpdir by default
Modified: 12/3/2024
MEDIUM 5.9 PyPI
GHSA-qh2x-hpf9-cf2g · CVE-2013-2255 OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Modified: 5/2/2024
— PyPI
PYSEC-2013-24 · CVE-2013-2013, GHSA-8q2m-pwxf-jc7g Modified: 11/8/2023
— PyPI
PYSEC-2014-69 · CVE-2013-2104, GHSA-4rrr-j7ff-r844 Modified: 11/8/2023
— PyPI
PYSEC-2014-70 · CVE-2014-0105, GHSA-gwvq-rgqf-993f Modified: 11/8/2023
— PyPI
PYSEC-2014-71 · CVE-2014-7144, GHSA-7f2c-vp52-gmfw Modified: 11/8/2023
— PyPI
PYSEC-2015-31 · CVE-2015-1852, GHSA-p9wq-mjh8-q72m Modified: 11/8/2023
— PyPI
PYSEC-2019-161 · CVE-2013-2167, GHSA-9vg3-cf92-h2h7 Modified: 11/8/2023
— PyPI
PYSEC-2019-197 · CVE-2013-2166, GHSA-c3xq-cj8f-7829 Modified: 11/8/2023