Not rated
CVE-2013-2255 HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail…
Description
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
Affected products and versions
References
- security-tracker.debian.org security-tracker.debian.org
- bugzilla.redhat.com bugzilla.redhat.com
- bugzilla.suse.com bugzilla.suse.com
- access.redhat.com access.redhat.com
- exchange.xforce.ibmcloud.com exchange.xforce.ibmcloud.com
- bugs.launchpad.net bugs.launchpad.net
- www.securityfocus.com www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Keystone
The 13 CVEs of Keystone →
CVE-2026-90460
An issue was discovered in OpenStack Keystone before 29.0.3
7.6
High
CVE-2026-80183
In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every…
7.1
High
CVE-2026-80184
In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens,…
7.6
High
CVE-2026-80182
In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped…
7.6
High