6
CVE-2014-0105
- EPSS 0.37%
- Veröffentlicht 15.04.2014 14:55:03
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle secalert@redhat.com
- Teams Watchlist Login
- Unerledigt Login
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openstack ≫ Python-keystoneclient Version <= 0.4.2
Openstack ≫ Python-keystoneclient Version0.2.2
Openstack ≫ Python-keystoneclient Version0.2.3
Openstack ≫ Python-keystoneclient Version0.2.4
Openstack ≫ Python-keystoneclient Version0.3.0
Openstack ≫ Python-keystoneclient Version0.3.1
Openstack ≫ Python-keystoneclient Version0.3.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.578 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|