Red Hat Security Advisory

RHSA-2013:0944

python-keystoneclient security and bug fix update

Released 2013-06-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 python-keystoneclient-1:0.2.3-2.el6ost, python-keystoneclient-doc-1:0.2.3-2.el6ost

Fixes 1 record

TI-2013-01873 CVE-2013-2104 · GHSA-4rrr-j7ff-r844

python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not…

LOW 29

python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2)…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02122 Published 2014-01-21 Fixed in 0.2.4 CWE-264