Read the docs
Red Hat Security Advisory

RHSA-2014:1783

python-keystoneclient security and bug fix update

Released 2014-11-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 24

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01896 Published 2014-10-02 Partial fix · 0.11.0, 1.2.0 CWE-310