{"action":"Upgrade python-keystoneclient to 0.2.4 or later.","affected":[{"fixed":"0.2.4","introduced":"0"}],"component":"python-keystoneclient","cve_ids":["CVE-2013-2013"],"ecosystem":"PyPI","epss":0.0037,"exploited":false,"fixed_versions":["0.2.4"],"ghsa_id":"GHSA-8q2m-pwxf-jc7g","id":"tcs_01M5KG5SX3WRNQZ5CR0ZHR3EQQ","modified_at":"2026-06-10T17:02:31.787585805Z","published_at":"2013-10-01T20:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-24","http://www.openwall.com/lists/oss-security/2013/05/23/4","https://bugs.launchpad.net/python-keystoneclient/+bug/938315","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16937","https://github.com/advisories/GHSA-8q2m-pwxf-jc7g"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-24","url":"https://osv.dev/vulnerability/PYSEC-2013-24"}],"summary":"The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the proc"}