{"action":"Upgrade python-keystoneclient to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"python-keystoneclient","cve_ids":["CVE-2014-0105"],"ecosystem":"PyPI","epss":0.01101,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-gwvq-rgqf-993f","id":"tcs_01M5KG6BXB932PXY0ZZ97WHTT7","modified_at":"2026-06-10T17:02:31.937938209Z","published_at":"2014-04-15T14:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-70","http://rhn.redhat.com/errata/RHSA-2014-0382.html","https://bugs.launchpad.net/python-keystoneclient/+bug/1282865","http://www.openwall.com/lists/oss-security/2014/03/27/4","http://rhn.redhat.com/errata/RHSA-2014-0409.html","https://github.com/advisories/GHSA-gwvq-rgqf-993f"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-70","url":"https://osv.dev/vulnerability/PYSEC-2014-70"}],"summary":"The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authent"}