Lucene search
HistoryOct 01, 2013 - 8:55 p.m.
CVE-2013-2013
cve
2013-2013
python-keystoneclient
command injection
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
8.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.
Affected configurations
Node
openstackpython-keystoneclientRangeâ¤0.2.3
ORopenstackpython-keystoneclientMatch0.2.2
Related
fedora
fedora
[SECURITY] Fedora 18 Update: python-keystoneclient-0.2.0-2.fc18
2013-08-21 00:09:10
[SECURITY] Fedora 19 Update: python-keystoneclient-0.2.3-7.fc19
2013-08-15 02:35:03
prion
prion
Default credentials
2013-10-01 20:55:00
github
github
python-keystoneclient unsecure user password update
2022-05-17 00:55:33
nessus
nessus
openSUSE Security Update : python-keystoneclient (openSUSE-SU-2013:1090-1)
2014-06-13 00:00:00
Slackware 13.0 / 13.1 / 13.37 / 14.0 / current : glibc (SSA:2013-260-01)
2013-09-18 00:00:00
Fedora 18 : python-keystoneclient-0.2.0-2.fc18 (2013-13900)
2013-08-21 00:00:00
openvas
openvas
Fedora Update for python-keystoneclient FEDORA-2013-13900
2013-08-23 00:00:00
Fedora Update for python-keystoneclient FEDORA-2013-13900
2013-08-23 00:00:00
Slackware: Security Advisory (SSA:2013-260-01)
2022-04-21 00:00:00
slackware
slackware
[slackware-security] glibc
2013-09-18 06:31:28
nvd
nvd
CVE-2013-2013
2013-10-01 20:55:33
debiancve
debiancve
CVE-2013-2013
2013-10-01 20:55:33
ubuntucve
ubuntucve
CVE-2013-2013
2013-10-01 00:00:00
osv
osv
PYSEC-2013-24
2013-10-01 20:55:00
python-keystoneclient unsecure user password update
2022-05-17 00:55:33
cvelist
cvelist
CVE-2013-2013
2013-10-01 20:00:00
securityvulns
securityvulns
[slackware-security] glibc (SSA:2013-260-01)
2013-10-03 00:00:00
seebug
seebug
OpenStack Keystone ĺŻç 俥ćŻćłé˛ćźć´(CVE-2013-2013)
2013-04-28 00:00:00
mskb
mskb
MS13-028: Cumulative Security Update for Internet Explorer: April 9, 2013
2013-04-09 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
8.5 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-2013