CVE:CVE-2013-2167
CNNVD:CNNVD-201306-380
OpenStack python-keystoneclient是一款基于Python的身份验证客户端库。
OpenStack python-keystoneclient 0.2.3版本至0.2.5版本中存在数据伪造问题漏洞。具有授权的攻击者可利用该漏洞绕过既定的安全限制，执行未授权操作，有助于发起进一步攻击。
solution:Upgrade openstack python-keystoneclient to a higher version than 0.2.5,and avoid the version [0.2.3,0.2.5]; Upgrade redhat openstack to a higher version than 3.0,and avoid the version 3.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0