Red Hat Security Advisory

RHSA-2014:0382

python-keystoneclient security update

Released 2014-04-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 python-keystoneclient-1:0.7.1-2.el6ost, python-keystoneclient-doc-1:0.7.1-2.el6ost, python-six-1.5.2-1.el6

Fixes 1 record

TI-2014-00100 CVE-2014-0105 · GHSA-gwvq-rgqf-993f

The auth_token middleware in the OpenStack Python client library for Keystone (aka…

LOW 29

The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01092 Published 2014-04-15 Fixed in 0.7.0 CWE-255