Search for packages
| purl | pkg:rpm/redhat/python-keystoneclient@1:0.2.3-2?arch=el6ost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-p776-3n3m-wkhz
Aliases: CVE-2013-2104 GHSA-4rrr-j7ff-r844 PYSEC-2014-69 |
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:50:46.432197+00:00 | RedHat Importer | Affected by | VCID-p776-3n3m-wkhz | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2104.json | 38.0.0 |