CVE-2013-2157

MEDIUM 4.3CVE-2013-2157 · Published 20/08/2013 · updated 16/06/2026

In short

CVE-2013-2157 is a MEDIUM (CVSS 4.3) vulnerability affecting keystone (openstack).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.9% of all vulnerabilities.
Fix: update to 2013.1.3 or later.

Package	Affected versions	Patched versions
keystone openstack	`≥ 2012.2, ≤ 2012.2.4≥ 2013.1, < 2013.1.3≥ 2013.2, ≤ 2013.2.4`	`2013.1.3`

Description

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

References

rhn.redhat.com/errata/RHSA-2013-0994.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2013-1083.html · Third Party Advisory
openwall.com/lists/oss-security/2013/06/13/3 · Mailing List
securityfocus.com/bid/60545 · Third Party Advisory

More vulnerabilities in keystone

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

keystone

openstack

≥ 2012.2, ≤ 2012.2.4≥ 2013.1, < 2013.1.3≥ 2013.2, ≤ 2013.2.4

2013.1.3

More vulnerabilities in keystone

See all →