tocsin

Debian/keystone: unknown

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

Action: Upgrade keystone to 2013.1.2-1 or later.

Affected

introducedfixedlast affected
02013.1.2-1-

Fixed versions

2013.1.2-1

Sources

published · modified · JSON