Red Hat Security Advisory

RHSA-2013:1083

openstack-keystone security update

Released 2013-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenStack Folsom openstack-keystone-2012.2.4-3.el6ost, openstack-keystone-doc-2012.2.4-3.el6ost, python-keystone-2012.2.4-3.el6ost

Fixes 1 record

TI-2013-01926 CVE-2013-2157 · GHSA-w396-2gg4-mxgv

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with…

LOW 26

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03128 Published 2013-08-20 Fixed CWE-287