Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

keystonemiddleware

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
PyPI

Advisories 3

  • The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware…

    Affected: fixed in 1.5.4; from 1.6.0, fixed in 2.3.3; from 2.4.0, fixed in 4.1.0; fixed in 1.5.4; from 1.6.0, fixed in 2.3.3.

  • The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification…

    Affected: fixed in 1.6.0.

  • OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification…

    Affected: fixed in 0.11.0; from 1.0, fixed in 1.2.0; fixed in 0.11.0; from 1.0, fixed in 1.2.0.