HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| python-keystoneclient(PyPI) | 0 | 0.4.0 | N/A |
| cinder(PyPI) | 0 | 7.0.0a0 | N/A |
| neutron(PyPI) | 0 | 7.0.0a0 | N/A |
| keystone(PyPI) | 0 | 8.0.0a0 | N/A |
CVSS Metrics
