Most recent entries from all

BREW-ansible-CVE-2014-7144 — OpenStack keystonemiddleware does not verify certificate

Affected: Homebrew: ansible

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (`paste.ini`) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.

certfr-2015-avi-072 — De multiples vulnérabilités ont été corrigées dans les produits IBM. Elles permettent à un…

certfr-2015-avi-072

EUVD-2026-102251

fkie_cve-2014-7144

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.

GHSA-7f2c-vp52-gmfw — OpenStack keystonemiddleware does not verify certificate

Affected: PyPI: keystonemiddleware, PyPI: python-keystoneclient

gsd-2014-7144

openSUSE-SU-2024:10471-1 — python-keystoneclient-3.5.0-1.1 on GA media

python-keystoneclient-3.5.0-1.1 on GA media

PYSEC-2014-26

Affected: PyPI: keystonemiddleware

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.

RHSA-2014:1783 — Red Hat Security Advisory: python-keystoneclient security and bug fix update

python-keystoneclient: TLS certificate verification disabled

SUSE-SU-2015:1141-1 — Security update for python-keystoneclient

Security update for python-keystoneclient

UBUNTU-CVE-2014-7144

Affected: Ubuntu:14.04:LTS: python-keystoneclient

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.