Red Hat Security AdvisoryRHSA-2015:1677
python-keystoneclient and python-keystonemiddlware security update
Released 2015-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 python-keystoneclient-1:0.11.1-2.el7ost, python-keystoneclient-doc-1:0.11.1-2.el7ost, python-keystonemiddleware-1.3.2-1.el7ost +1
Fixes 1 record
Priority LOW 24
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02244 · Published 2015-04-17 · Partial fix · 1.6.0, 1.4.0 CWE-17
