{"action":"Upgrade keystonemiddleware to 0.11.0 or later.","affected":[{"fixed":"0.11.0","introduced":"0"},{"fixed":"1.2.0","introduced":"1.0"}],"component":"keystonemiddleware","cve_ids":["CVE-2014-7144"],"ecosystem":"PyPI","epss":0.01896,"exploited":false,"fixed_versions":["0.11.0","1.2.0"],"ghsa_id":"GHSA-7f2c-vp52-gmfw","id":"tcs_01M5KG63M1A18VYJXWRANVJ3AH","modified_at":"2023-11-08T03:57:44.312368Z","published_at":"2014-10-02T14:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-26","http://www.openwall.com/lists/oss-security/2014/09/25/51","https://bugs.launchpad.net/python-keystoneclient/+bug/1353315","http://rhn.redhat.com/errata/RHSA-2014-1783.html","http://rhn.redhat.com/errata/RHSA-2014-1784.html","http://secunia.com/advisories/62709","http://rhn.redhat.com/errata/RHSA-2015-0020.html","http://www.ubuntu.com/usn/USN-2705-1","http://www.securityfocus.com/bid/69864"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-26","url":"https://osv.dev/vulnerability/PYSEC-2014-26"}],"summary":"OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the \"insecure\" option is set in a paste configuration (pas"}