[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSYpfrm4JWaoLK6ICeokHqLp0yw9wP4928H1hWakqPZs":3,"g5a-ex:openstack\u002Fpython-keystoneclient@*":149,"g5a-family:openstack\u002Fpython-keystoneclient":151},{"success":4,"data":5},true,{"product":6,"versions":60,"topVulnerabilitiesByEpss":82,"kevVulnerabilities":126,"seoMetadata":127,"meta":146},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":59},"openstack","python-keystoneclient",21,7,0,"2019-12-10",[14,18,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"0.2.2",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"0.2.3",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"0.2.4",{"version":24,"cve_count":11,"kev_count":11,"has_kev":17},"0.2.5",{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},"0.3.0",{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},"0.3.1",{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},"0.3.2",{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},"0.4.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.3",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"1.6.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"1.6.1",{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},"1.7.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"2.0.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"2.1.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"2.2.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},"2.3.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},"2.3.1",{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},"2.3.2","Python-keystoneclient by Openstack is a technology product with 21 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":11,"kev_count":11,"has_kev":17},{"version":26,"cve_count":20,"kev_count":11,"has_kev":17},{"version":28,"cve_count":20,"kev_count":11,"has_kev":17},{"version":30,"cve_count":20,"kev_count":11,"has_kev":17},{"version":32,"cve_count":11,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":11,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},[83,91,98,104,109,113,119],{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":90},"CVE-2015-1852","The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the \"insecure\" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.","2015-04-17",4.3,"v2","Medium",0.02611,{"cveId":92,"description":93,"publishedDate":12,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":17,"epssScore":97},"CVE-2013-2166","python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass",9.8,"v3.1","Critical",0.02147,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":103},"CVE-2013-2104","python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it has expired, or (2) use a revoked token once it expires.","2014-01-21",5.5,0.02082,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":87,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":108},"CVE-2014-7144","OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the \"insecure\" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.","2014-10-02",0.01981,{"cveId":110,"description":111,"publishedDate":12,"cvssScore":94,"cvssVersion":95,"severity":96,"isKev":17,"epssScore":112},"CVE-2013-2167","python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass",0.0197,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":117,"cvssVersion":88,"severity":89,"isKev":17,"epssScore":118},"CVE-2014-0105","The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an \"interaction between eventlet and python-memcached.\"","2014-04-15",6,0.01101,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":88,"severity":124,"isKev":17,"epssScore":125},"CVE-2013-2013","The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.","2013-10-01",2.1,"Low",0.00373,[],{"title":128,"metaDescription":129,"keywords":130,"structuredData":131},"Python-keystoneclient by Openstack - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Python-keystoneclient by Openstack covering 21 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Python-keystoneclient vulnerabilities, Python-keystoneclient security, Python-keystoneclient CVE, Openstack Python-keystoneclient, Python-keystoneclient threat intelligence, Openstack security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":132,"@type":133,"name":134,"description":129,"url":135,"manufacturer":136,"applicationCategory":140,"softwareVersion":141,"mainEntity":142},"https:\u002F\u002Fschema.org","SoftwareApplication","Python-keystoneclient","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopenstack\u002Fpython-keystoneclient",{"@type":137,"name":138,"url":139},"Organization","Openstack","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopenstack","Security Software","21 versions tracked",{"@type":143,"name":144,"description":145,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Python-keystoneclient Security Vulnerabilities","Security vulnerabilities affecting Python-keystoneclient by Openstack",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":147,"apiVersion":148},"2026-10-18T16:38:06.938Z","3.0",{"rows":150,"total":11,"capped":17,"failed":11},[],[]]