CVE-2013-2157

Опубликовано: 20 авг. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

Ссылки

http://rhn.redhat.com/errata/RHSA-2013-0994.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1083.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/06/13/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/60545
Third Party Advisory
VDB Entry
http://rhn.redhat.com/errata/RHSA-2013-0994.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1083.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/06/13/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/60545
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*

Версия от 2012.2 (включая) до 2012.2.4 (включая)

cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*

Версия от 2013.1 (включая) до 2013.1.3 (исключая)

cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*

Версия от 2013.2 (включая) до 2013.2.4 (включая)

EPSS

Процентиль: 52%

0.00288

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2013-2157

ubuntu

больше 12 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVE-2013-2157

redhat

больше 12 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

CVE-2013-2157

debian

больше 12 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when u ...

GHSA-w396-2gg4-mxgv

github

больше 3 лет назад

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

EPSS

Процентиль: 52%

0.00288

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-287