{"action":"Upgrade cinder to 7.0.0a0 or later.","affected":[{"fixed":"7.0.0a0","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2013-2255"],"ecosystem":"PyPI","epss":0.0097,"exploited":false,"fixed_versions":["7.0.0a0"],"ghsa_id":"GHSA-qh2x-hpf9-cf2g","id":"tcs_01M5KFW2RPD1WCJ9V5SGNJEMFT","modified_at":"2026-07-13T16:43:08.272597925Z","published_at":"2022-05-05T00:28:57Z","references":["https://osv.dev/vulnerability/GHSA-qh2x-hpf9-cf2g","https://nvd.nist.gov/vuln/detail/CVE-2013-2255","https://github.com/openstack/cinder/commit/0f9652d92e175a1f7dc3c2a37ab444b8f189375a","https://github.com/openstack/keystone/commit/5bd4c2984d329625a2a8442b316fa235dbb88a3d","https://github.com/openstack/neutron/commit/7255e056092f034daaeb4246a812900645d46911","https://github.com/openstack/python-keystoneclient/commit/20e166fd8a943ee3f91ba362a47e9c14c7cc5f4c","https://access.redhat.com/security/cve/cve-2013-2255","https://bugs.launchpad.net/ossn/+bug/1188189","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2255","https://exchange.xforce.ibmcloud.com/vulnerabilities/85562","https://security-tracker.debian.org/tracker/CVE-2013-2255","https://web.archive.org/web/20200229073508/https://www.securityfocus.com/bid/61118"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-qh2x-hpf9-cf2g#PyPI/cinder","url":"https://osv.dev/vulnerability/GHSA-qh2x-hpf9-cf2g"}],"summary":"OpenStack Keystone and other components vulnerable to Improper Certificate Validation"}