Insufficient Verification of Data Authenticity

CVE-2013-2167

High

9.8/10

Summary

python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: HIGH

CWE-345 - Insufficient Verification of Data Authenticity

The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References

Advisory Timeline

Published Dec 10, 2019