<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T22:52:26.681107+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/brew-ansible-cve-2014-7144</id>
    <title>BREW-ansible-CVE-2014-7144 — OpenStack keystonemiddleware does not verify certificate</title>
    <updated>2026-10-04T22:52:26.889187+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Homebrew: ansible</p>
<p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (`paste.ini`) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/brew-ansible-cve-2014-7144"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2015-avi-072</id>
    <title>certfr-2015-avi-072 — De multiples vulnérabilités ont été corrigées dans &lt;span
class="textit"&gt;les produits IBM&lt;/span&gt;. Elles permettent à un…</title>
    <updated>2026-10-04T22:52:26.889257+00:00</updated>
    <content>certfr-2015-avi-072</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2015-avi-072"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-102251</id>
    <title>EUVD-2026-102251</title>
    <updated>2026-10-04T22:52:26.889279+00:00</updated>
    <content>EUVD-2026-102251</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-102251"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2014-7144</id>
    <title>fkie_cve-2014-7144</title>
    <updated>2026-10-04T22:52:26.889292+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2014-7144"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-7f2c-vp52-gmfw</id>
    <title>GHSA-7f2c-vp52-gmfw — OpenStack keystonemiddleware does not verify certificate</title>
    <updated>2026-10-04T22:52:26.889316+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: keystonemiddleware, PyPI: python-keystoneclient</p>
<p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (`paste.ini`) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-7f2c-vp52-gmfw"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2014-7144</id>
    <title>gsd-2014-7144</title>
    <updated>2026-10-04T22:52:26.889343+00:00</updated>
    <content>gsd-2014-7144</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2014-7144"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:10471-1</id>
    <title>openSUSE-SU-2024:10471-1 — python-keystoneclient-3.5.0-1.1 on GA media</title>
    <updated>2026-10-04T22:52:26.889356+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>python-keystoneclient-3.5.0-1.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:10471-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/pysec-2014-26</id>
    <title>PYSEC-2014-26</title>
    <updated>2026-10-04T22:52:26.889376+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> PyPI: keystonemiddleware</p>
<p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/pysec-2014-26"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/rhsa-2014:1783</id>
    <title>RHSA-2014:1783 — Red Hat Security Advisory: python-keystoneclient security and bug fix update</title>
    <updated>2026-10-04T22:52:26.889396+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>python-keystoneclient: TLS certificate verification disabled</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/rhsa-2014:1783"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2015:1141-1</id>
    <title>SUSE-SU-2015:1141-1 — Security update for python-keystoneclient</title>
    <updated>2026-10-04T22:52:26.889411+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for python-keystoneclient</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2015:1141-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7144</id>
    <title>UBUNTU-CVE-2014-7144</title>
    <updated>2026-10-04T22:52:26.889426+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:14.04:LTS: python-keystoneclient</p>
<p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-7144"/>
  </entry>
</feed>
