CVE-2015-1852

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-1852
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://lists.openstack.org/pipermail/openstack-announce/2015-April/000350.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1677.html
http://rhn.redhat.com/errata/RHSA-2015-1685.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
http://www.securityfocus.com/bid/74187 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-2705-1 Third Party Advisory
https://bugs.launchpad.net/keystonemiddleware/+bug/1411063
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:openstack:keystonemiddleware:*:*:*:*:*:*:*:*
cpe:2.3:a:openstack:python-keystoneclient:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
History

13 Feb 2023, 00:47

Type Values Removed Values Added
Summary It was discovered that some items in the S3Token paste configuration as used by python-keystonemiddleware (formerly python-keystoneclient) were incorrectly evaluated as strings, an issue similar to CVE-2014-7144. If the "insecure" option were set to "false", the option would be evaluated as true, resulting in TLS connections being vulnerable to man-in-the-middle attacks. Note: the "insecure" option defaults to false, so setups that do not specifically define "insecure=false" are not affected. The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
References
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1209527', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1209527', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2015:1677', 'name': 'https://access.redhat.com/errata/RHSA-2015:1677', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2015:1685', 'name': 'https://access.redhat.com/errata/RHSA-2015:1685', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2015-1852', 'name': 'https://access.redhat.com/security/cve/CVE-2015-1852', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 20:20

Type Values Removed Values Added
References
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1209527 -
  • (MISC) https://access.redhat.com/errata/RHSA-2015:1677 -
  • (MISC) https://access.redhat.com/errata/RHSA-2015:1685 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2015-1852 -
Summary The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144. It was discovered that some items in the S3Token paste configuration as used by python-keystonemiddleware (formerly python-keystoneclient) were incorrectly evaluated as strings, an issue similar to CVE-2014-7144. If the "insecure" option were set to "false", the option would be evaluated as true, resulting in TLS connections being vulnerable to man-in-the-middle attacks. Note: the "insecure" option defaults to false, so setups that do not specifically define "insecure=false" are not affected.
Information

Published : 2015-04-17 17:59

Updated : 2023-12-10 11:31

NVD link : CVE-2015-1852

Mitre link : CVE-2015-1852

CVE.ORG link : CVE-2015-1852

JSON object : View

Products Affected

openstack

  • python-keystoneclient
  • keystonemiddleware

canonical

  • ubuntu_linux
CWE
CWE-17

DEPRECATED: Code