{"action":"Upgrade python-keystoneclient to 0.11.0 or later.","affected":[{"fixed":"0.11.0","introduced":"0"},{"fixed":"1.2.0","introduced":"1.0"}],"component":"python-keystoneclient","cve_ids":["CVE-2014-7144"],"ecosystem":"PyPI","epss":0.01903,"exploited":false,"fixed_versions":["0.11.0","1.2.0"],"ghsa_id":"GHSA-7f2c-vp52-gmfw","id":"tcs_01M5KG6C29S3891PVC1GZJFWRK","modified_at":"2026-06-10T17:02:32.056119942Z","published_at":"2014-10-02T14:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-71","http://www.openwall.com/lists/oss-security/2014/09/25/51","https://bugs.launchpad.net/python-keystoneclient/+bug/1353315","http://rhn.redhat.com/errata/RHSA-2014-1783.html","http://rhn.redhat.com/errata/RHSA-2014-1784.html","http://secunia.com/advisories/62709","http://rhn.redhat.com/errata/RHSA-2015-0020.html","http://www.ubuntu.com/usn/USN-2705-1","http://www.securityfocus.com/bid/69864","https://github.com/advisories/GHSA-7f2c-vp52-gmfw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-71","url":"https://osv.dev/vulnerability/PYSEC-2014-71"}],"summary":"OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the \"insecure\" option is set in a paste configuration (pas"}