Improper certificate validation in OpenStack Keystone
Priority LOW 28CWE-295Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 2 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-295.
Summary
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
Why it matters now
EPSS 0.0097 62nd percentileScored 2026-11-07
Fix Partial python-keystoneclient (PyPI): 0.4.0cinder (PyPI): 7.0.0a0+2 more productsRed Hat: 2 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenStack | Keystone | 2013 | — | No fix listed | CNA |
| OpenStack | Compute | 2013.1 | — | No fix listed | CNA |
| — | python-keystoneclient (PyPI) | before 0.4.0 | 0.4.0 | Patch available | GHSA-qh2x-hpf9-cf2g |
| — | cinder (PyPI) | before 7.0.0a0 | 7.0.0a0 | Patch available | GHSA-qh2x-hpf9-cf2g |
| — | neutron (PyPI) | before 7.0.0a0 | 7.0.0a0 | Patch available | GHSA-qh2x-hpf9-cf2g |
| — | keystone (PyPI) | before 8.0.0a0 | 8.0.0a0 | Patch available | GHSA-qh2x-hpf9-cf2g |
- Keystone VendorOpenStack Affected 2013 Fixed in — No fix listed CNA
- Compute VendorOpenStack Affected 2013.1 Fixed in — No fix listed CNA
- python-keystoneclient (PyPI) Vendor— Affected before 0.4.0 Fixed in 0.4.0 Patch available GHSA-qh2x-hpf9-cf2g
- cinder (PyPI) Vendor— Affected before 7.0.0a0 Fixed in 7.0.0a0 Patch available GHSA-qh2x-hpf9-cf2g
- neutron (PyPI) Vendor— Affected before 7.0.0a0 Fixed in 7.0.0a0 Patch available GHSA-qh2x-hpf9-cf2g
- keystone (PyPI) Vendor— Affected before 8.0.0a0 Fixed in 8.0.0a0 Patch available GHSA-qh2x-hpf9-cf2g
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openstack:compute:2013.1:*:*:*:*:*:*:* | 2013.1 | Vulnerable | OpenStack |
| cpe:2.3:a:openstack:keystone:2013:*:*:*:*:*:*:* | 2013 | Vulnerable | OpenStack |
| cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
- cpe:2.3:a:openstack:compute:2013.1:*:*:*:*:*:*:* Versions 2013.1 Vulnerable ·OpenStack
- cpe:2.3:a:openstack:keystone:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·OpenStack
- cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
Remediation
- Fix · GHSA-qh2x-hpf9-cf2g python-keystoneclient (PyPI) Fixed in 0.4.0 Advisory →
- Fix · GHSA-qh2x-hpf9-cf2g cinder (PyPI) Fixed in 7.0.0a0 Advisory →
- Fix · GHSA-qh2x-hpf9-cf2g neutron (PyPI) Fixed in 7.0.0a0 Advisory →
- Fix · GHSA-qh2x-hpf9-cf2g keystone (PyPI) Fixed in 8.0.0a0 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenStack Platform 3 | Affected | No fix yet |
| Red Hat OpenStack Platform 4 | Affected | No fix yet |
Timeline
- 2026-10-02 Threatist record created from CVE-2013-2255
- 2026-10-03 Alias added: GHSA-qh2x-hpf9-cf2g
References
Advisory 6
- https://security-tracker.debian.org/tracker/CVE-2013-2255
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2255
- https://access.redhat.com/security/cve/cve-2013-2255
- https://bugs.launchpad.net/ossn/+bug/1188189
- https://nvd.nist.gov/vuln/detail/CVE-2013-2255
Other 5
- https://github.com/openstack/cinder/commit/0f9652d92e175a1f7dc3c2a37ab444b8f189375a
- https://github.com/openstack/keystone/commit/5bd4c2984d329625a2a8442b316fa235dbb88a3d
- https://github.com/openstack/neutron/commit/7255e056092f034daaeb4246a812900645d46911
- https://github.com/openstack/python-keystoneclient/commit/20e166fd8a943ee3f91ba362a47e9c14c7cc5f4c
- https://web.archive.org/web/20200229073508/https://www.securityfocus.com/bid/61118
More OpenStack Compute vulnerabilities
- TI-2013-05849 The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver… CVSS 2.0HIGH 7.1
- TI-2014-00161 The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before… CVSS 2.0MEDIUM 6.0
- TI-2013-03652 The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before… CVSS 2.0MEDIUM 4.3
- TI-2012-02292 The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1)… CVSS 2.0MEDIUM 4.3
- TI-2013-03658 Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and… CVSS 2.0MEDIUM 4.0
- TI-2015-02371 OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local… CVSS 3.0MEDIUM 4.7
Sources
- CVE-2013-2255 · CVE Program
- CVE-2013-2255 · NVD
- FIRST EPSS
- GHSA-qh2x-hpf9-cf2g · GitHub Advisory Database · CC BY 4.0
- CVE-2013-2255 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences