medium4.3
CVE-2013-2157
OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an…
Impact
OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Keystone | from 2012.2 through 2012.2.4 from 2013.1 before 2013.1.3 from 2013.2 through 2013.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2013-0994.html
- http://rhn.redhat.com/errata/RHSA-2013-1083.html
- http://www.openwall.com/lists/oss-security/2013/06/13/3
- http://www.securityfocus.com/bid/60545
- http://rhn.redhat.com/errata/RHSA-2013-0994.html
- http://rhn.redhat.com/errata/RHSA-2013-1083.html
- http://www.openwall.com/lists/oss-security/2013/06/13/3
- http://www.securityfocus.com/bid/60545