Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2013-2255

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

VectorNETWORK

PublishedNov 01, 2019, 19:15

Published Bysecalert@redhat.com

Base Score

Score5.9

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

python-keystoneclient(PyPI)00.4.0N/A

cinder(PyPI)07.0.0a0N/A

neutron(PyPI)07.0.0a0N/A

keystone(PyPI)08.0.0a0N/A

References

https://access.redhat.com/security/cve/cve-2013-2255
https://bugs.launchpad.net/ossn/+bug/1188189
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2255
https://exchange.xforce.ibmcloud.com/vulnerabilities/85562
https://security-tracker.debian.org/tracker/CVE-2013-2255
https://www.securityfocus.com/bid/61118

Weakness Type

CWE-295

CVSS Metrics

Base Score

5.9

Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK