NVD Vulnerability Detail

CVE-2013-2255

Summary	HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
Publication Date	Nov. 2, 2019, 4:15 a.m.
Registration Date	Jan. 26, 2021, 3:38 p.m.
Last Update	Nov. 21, 2024, 10:51 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://access.redhat.com/security/cve/cve-2013-2255	Vendor Advisory
2	https://access.redhat.com/security/cve/cve-2013-2255	Vendor Advisory
3	https://bugs.launchpad.net/ossn/+bug/1188189	Issue Tracking Third Party Advisory
4	https://bugs.launchpad.net/ossn/+bug/1188189	Issue Tracking Third Party Advisory
5	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255	Issue Tracking Vendor Advisory
6	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255	Issue Tracking Vendor Advisory
7	https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2255	Issue Tracking Third Party Advisory
8	https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2255	Issue Tracking Third Party Advisory
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/85562	Third Party Advisory VDB Entry
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/85562	Third Party Advisory VDB Entry
11	https://security-tracker.debian.org/tracker/CVE-2013-2255	Third Party Advisory
12	https://security-tracker.debian.org/tracker/CVE-2013-2255	Third Party Advisory
13	https://www.securityfocus.com/bid/61118	Third Party Advisory VDB Entry
14	https://www.securityfocus.com/bid/61118	Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-295	不正な証明書検証	https://cwe.mitre.org/data/definitions/295.html

JVN Vulnerability Information

複数の OpenStack 製品における証明書検証に関する脆弱性

Title	複数の OpenStack 製品における証明書検証に関する脆弱性
Summary	複数の OpenStack 製品には、証明書検証に関する脆弱性が存在します。
Possible impacts	情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 19, 2013, midnight
Registration Date	Nov. 14, 2019, 10:52 a.m.
Last Update	Nov. 14, 2019, 10:52 a.m.

Affected System

レッドハット

Red Hat OpenStack

Debian

Debian GNU/Linux

OpenStack

OpenStack Compute 2013.1

Openstack Keystone 2013

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-2255	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2255
National Vulnerability Database (NVD)
2	CVE-2013-2255	https://nvd.nist.gov/vuln/detail/CVE-2013-2255
Red Hat CVE Database
3	CVE-2013-2255	https://access.redhat.com/security/cve/cve-2013-2255
Security Bug Tracker
4	CVE-2013-2255	https://security-tracker.debian.org/tracker/CVE-2013-2255

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-295	https://cwe.mitre.org/data/definitions/295.html

ベンダー情報

No	Name	URL
Launchpad
1	Bug #1188189	https://bugs.launchpad.net/ossn/+bug/1188189
Red Hat Bugzilla
2	Bug 924514	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2255

Change Log

No	Changed Details	Date of change
1	[2019年11月14日] 掲載	Nov. 14, 2019, 10:52 a.m.