{"action":"Upgrade python-keystoneclient to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"python-keystoneclient","cve_ids":["CVE-2014-0105"],"ecosystem":"PyPI","epss":0.01101,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-gwvq-rgqf-993f","id":"tcs_01M5KFJF0ZJ0N10H52WQNFGG4G","modified_at":"2024-10-25T21:01:25.911089Z","published_at":"2022-05-17T00:13:54Z","references":["https://osv.dev/vulnerability/GHSA-gwvq-rgqf-993f","https://nvd.nist.gov/vuln/detail/CVE-2014-0105","https://bugs.launchpad.net/python-keystoneclient/+bug/1282865","https://github.com/openstack/python-keystoneclient","https://github.com/pypa/advisory-database/tree/main/vulns/python-keystoneclient/PYSEC-2014-70.yaml","https://review.opendev.org/c/openstack/python-keystoneclient/+/81078","http://rhn.redhat.com/errata/RHSA-2014-0382.html","http://rhn.redhat.com/errata/RHSA-2014-0409.html","http://www.openwall.com/lists/oss-security/2014/03/27/4"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-gwvq-rgqf-993f","url":"https://osv.dev/vulnerability/GHSA-gwvq-rgqf-993f"}],"summary":"python-keystoneclient vulnerable to context confusion in Keystone auth_token middleware"}