[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKW_GLjZILJUIa1zQonydjZo71CJQEd9Ei2MWmgJfEo4":3,"g5a-risk:CVE-2015-1852":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":48,"references":49,"referencesCount":94,"weaknesses":95,"weaknessesCount":99,"isActivelyExploited":100,"cisaInfo":15,"otxData":15,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":147,"notableEvents":148},"CVE-2015-1852","What is CVE-2015-1852?","The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the \"insecure\" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.","The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the \"ins...","2015-04-17T17:59:02.653","2025-04-12T10:46:40.837",4.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,2.9,0.02611,[28,28,28,28,28,28,28],"Medium",[32,37,40,45],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"openstack","keystonemiddleware","*","cpe:2.3:a:openstack:keystonemiddleware:*:*:*:*:*:*:*:*",{"vendor":33,"product":38,"version":35,"criteria":39,"vulnerable":4},"python-keystoneclient","cpe:2.3:a:openstack:python-keystoneclient:*:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"15.04","cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*",4,[50,55,59,62,66,72,76,80,82,84,86,88,90,92],{"url":51,"source":52,"tags":53},"http:\u002F\u002Flists.openstack.org\u002Fpipermail\u002Fopenstack-announce\u002F2015-April\u002F000350.html","Openstack",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1677.html","Red Hat",[],{"url":60,"source":57,"tags":61},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1685.html",[],{"url":63,"source":64,"tags":65},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fbulletinapr2015-2511959.html","Oracle",[],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F74187","Securityfocus",[70,71],"Third Party Advisory","VDB Entry",{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2705-1","Ubuntu",[70],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fbugs.launchpad.net\u002Fkeystonemiddleware\u002F+bug\u002F1411063","Launchpad",[],{"url":51,"source":52,"tags":81},[54],{"url":56,"source":57,"tags":83},[],{"url":60,"source":57,"tags":85},[],{"url":63,"source":64,"tags":87},[],{"url":67,"source":68,"tags":89},[70,71],{"url":73,"source":74,"tags":91},[70],{"url":77,"source":78,"tags":93},[],14,[96],{"id":97,"name":97,"description":98},"Unknown","CWE-17",1,false,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2015-1852? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-1852, a medium severity cyber security vulnerability from 2015. The s3_token middleware in OpenStack keystonemiddleware be...","CVE-2015-1852, CVE-2015-1852 vulnerability, CVE-2015-1852 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, openstack security, canonical security, keystonemiddleware vulnerability, python-keystoneclient vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2015-1852",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-1852","Cybersecurity","CVE-2015-1852, CVE-2015-1852 vulnerability, CVE-2015-1852 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128,139],{"Operator":15,"Negate":15,"Nodes":129},[130],{"Operator":131,"Negate":15,"CPEMatch":132},"OR",[133,136],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":135},"D16BA69A-6102-4D44-82B7-C23078B2AD51","1.5.0",{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":137,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":138},"33711278-0C92-4614-A145-59E844E6275F","1.3.0",{"Operator":15,"Negate":15,"Nodes":140},[141],{"Operator":131,"Negate":15,"CPEMatch":142},[143,145],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":144,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F38D3B7E-8429-473F-BB31-FC3583EE5A5B",[],[],{"lastModified":11,"cacheTime":150,"version":21},1792350064525,{"score":152,"band":153,"action":154,"scoredAt":155},15,"Info","Track","2026-10-17T07:38:00.223336+00:00"]