p PatchFirst

CVE-2013-2255

CVE-2013-2255

This page contains facts from public vulnerability sources. Check the original advisory before updating.

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

CVSS 5.9 · Medium · EPSS 1.0% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • keystone

    Versions
    • 2013: Affected

    No fix published

  • compute

    Versions
    • 2013.1: Affected

    No fix published

  • keystone Debian:12

    Affected ranges
    • ECOSYSTEM: < 2014.1-1

    Update to 2014.1-1

  • keystone Debian:13

    Affected ranges
    • ECOSYSTEM: < 2014.1-1

    Update to 2014.1-1

  • keystone Debian:14

    Affected ranges
    • ECOSYSTEM: < 2014.1-1

    Update to 2014.1-1

  • python-keystoneclient PyPI

    Versions
    • 0.1.1
    • 0.1.2
    • 0.1.3
    • 0.2.0
    • 0.2.1
    • 0.2.2
    • 0.2.3
    • 0.2.4
    • 0.2.5
    • 0.3.0
    • 0.3.1
    • 0.3.2
    Affected ranges
    • ECOSYSTEM: < 0.4.0

    Update to 0.4.0

  • cinder PyPI

    Affected ranges
    • ECOSYSTEM: < 7.0.0a0

    Update to 7.0.0a0

  • neutron PyPI

    Versions
    • 0.0
    Affected ranges
    • ECOSYSTEM: < 7.0.0a0

    Update to 7.0.0a0

  • keystone PyPI

    Affected ranges
    • ECOSYSTEM: < 8.0.0a0

    Update to 8.0.0a0

Original sources

Check your server →