https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:19:24 +0000 https://vulnerability.circl.lu/vuln/cve-2014-7144 <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the &#34;insecure&#34; option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p> <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the &#34;insecure&#34; option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p> https://vulnerability.circl.lu/vuln/cve-2014-7144 https://vulnerability.circl.lu/vuln/ghsa-7f2c-vp52-gmfw <p><strong>Affected:</strong> PyPI: keystonemiddleware, PyPI: python-keystoneclient</p> <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the &#34;insecure&#34; option is set in a paste configuration (`paste.ini`) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p> <p><strong>Affected:</strong> PyPI: keystonemiddleware, PyPI: python-keystoneclient</p> <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the &#34;insecure&#34; option is set in a paste configuration (`paste.ini`) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p> https://vulnerability.circl.lu/vuln/ghsa-7f2c-vp52-gmfw https://vulnerability.circl.lu/vuln/pysec-2014-26 <p><strong>Affected:</strong> PyPI: keystonemiddleware</p> <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the &#34;insecure&#34; option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p> <p><strong>Affected:</strong> PyPI: keystonemiddleware</p> <p>OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the &#34;insecure&#34; option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.</p> https://vulnerability.circl.lu/vuln/pysec-2014-26