CVE-2015-1852
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
CVE-2015-1852 is a medium vulnerability (CVSS 4.3) in Openstack Keystonemiddleware, published April 17, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.24%, the 83rd percentile. Fixed in keystonemiddleware 1.6.0.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 2.24%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.6.0keystonemiddleware +31 more
Description
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
keystonemiddlewarePyPI | before 1.6.0 | 1.6.0 |
python-keystoneclientPyPI | before 1.4.0 | 1.4.0 |
python-keystoneclientDebian:12 | before 1:1.3.0-2 | 1:1.3.0-2 |
python-keystoneclientDebian:13 | before 1:1.3.0-2 | 1:1.3.0-2 |
python-keystoneclientDebian:14 | before 1:1.3.0-2 | 1:1.3.0-2 |
python-keystonemiddlewareDebian:12 | before 1.5.0-2 | 1.5.0-2 |
python-keystonemiddlewareDebian:13 | before 1.5.0-2 | 1.5.0-2 |
python-keystonemiddlewareDebian:14 | before 1.5.0-2 | 1.5.0-2 |
keystonemiddlewarePyPI | before 1.6.0, plus listed versions 1.0.01.1.01.1.11.2.01.3.0 Show 7 moreShow less1.3.11.3.21.4.01.5.01.5.11.5.21.5.3 | 1.6.0 |
python-keystoneclientPyPI | before 1.4.0, plus listed versions 0.1.10.1.20.1.30.10.00.10.1 Show 31 moreShow less0.11.00.11.10.11.20.2.00.2.10.2.20.2.30.2.40.2.50.3.00.3.10.3.20.4.00.4.10.4.20.5.00.5.10.6.00.7.00.7.10.8.00.9.01.0.01.1.01.1.11.2.01.3.01.3.11.3.21.3.31.3.4 | 1.4.0 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python-keystoneclientRed Hat:openstack:6::el7 | before 1:0.11.1-2.el7ost | 1:0.11.1-2.el7ost |
python-keystoneclient-docRed Hat:openstack:6::el7 | before 1:0.11.1-2.el7ost | 1:0.11.1-2.el7ost |
python-keystonemiddlewareRed Hat:openstack:6::el7 | before 0:1.3.2-1.el7ost | 0:1.3.2-1.el7ost |
python-keystonemiddleware-docRed Hat:openstack:6::el7 | before 0:1.3.2-1.el7ost | 0:1.3.2-1.el7ost |
python-keystoneclientRed Hat:openstack:5::el6 | before 1:0.9.0-6.el6ost | 1:0.9.0-6.el6ost |
python-keystoneclient-docRed Hat:openstack:5::el6 | before 1:0.9.0-6.el6ost | 1:0.9.0-6.el6ost |
python-keystoneclientRed Hat:openstack:5::el7 | before 1:0.9.0-6.el7ost | 1:0.9.0-6.el7ost |
python-keystoneclient-docRed Hat:openstack:5::el7 | before 1:0.9.0-6.el7ost | 1:0.9.0-6.el7ost |
python-keystoneclientSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | before 1.0.0-16.1 | 1.0.0-16.1 |
python-glanceclientSUSE:OpenStack Cloud 5 | before 0.15.0-9.2 | 0.15.0-9.2 |
python-keystoneclientSUSE:OpenStack Cloud 5 | before 1.0.0-11.1 | 1.0.0-11.1 |
python-keystonemiddlewareSUSE:OpenStack Cloud 5 | before 1.2.0-11.2 | 1.2.0-11.2 |
python-novaclientSUSE:OpenStack Cloud 5 | before 2.20.0-9.2 | 2.20.0-9.2 |
python-openstackclientSUSE:OpenStack Cloud 5 | before 0.4.1-9.2 | 0.4.1-9.2 |
python-glanceclientSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | before 0.15.0-3.1 | 0.15.0-3.1 |
python-keystoneclientSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | before 1.0.0-19.1 | 1.0.0-19.1 |
python-keystonemiddlewareSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | before 1.2.0-4.1 | 1.2.0-4.1 |
python-novaclientSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | before 2.20.0-6.1 | 2.20.0-6.1 |
python-swiftclientSUSE:Cloud Compute Node for SUSE Linux Enterprise 12 5 | before 2.3.1-3.1 | 2.3.1-3.1 |
python-keystoneclientUbuntu:14.04:LTS | before 1:0.7.1-ubuntu1.2, plus listed versions 1:0.3.2-0ubuntu11:0.4.1-0ubuntu11:0.4.2-0ubuntu11:0.6.0-0ubuntu11:0.7.1-ubuntu1 | 1:0.7.1-ubuntu1.2 |
python-keystoneclientUbuntu:14.04:LTS From an advisory covering 2 CVEs | before 1:0.7.1-ubuntu1.2, plus listed versions 1:0.3.2-0ubuntu11:0.4.1-0ubuntu11:0.4.2-0ubuntu11:0.6.0-0ubuntu11:0.7.1-ubuntu1 | 1:0.7.1-ubuntu1.2 |
python-keystonemiddlewareopenSUSE:Tumbleweed | before 4.9.0-1.3 | 4.9.0-1.3 |
What each source reports
NVD Score used
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
CVE-2015-1852- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-17
- Updated
- 2026-11-02
CVE ListNo score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
CVE-2015-1852- Updated
- 2026-11-02
EUVDEUVD-2015-0028No score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
EUVD-2015-0028- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p9wq-mjh8-q72m
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
GHSA-p9wq-mjh8-q72m- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSVGHSA-p9wq-mjh8-q72m
OpenStack keystonemiddleware and python-keystoneclient vulnerable to man-in-the-middle attacks
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
GHSA-p9wq-mjh8-q72m- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
OSVNo score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
CVE-2015-1852- Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2015-1852No score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
DEBIAN-CVE-2015-1852- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10411-1No score
python-keystonemiddleware-4.9.0-1.3 on GA media
These are all security issues fixed in the python-keystonemiddleware-4.9.0-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10411-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10471-1No score
python-keystoneclient-3.5.0-1.1 on GA media
These are all security issues fixed in the python-keystoneclient-3.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10471-1- Updated
- 2026-11-02
OSVPYSEC-2015-30No score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
PYSEC-2015-30- Updated
- 2026-11-02
OSVPYSEC-2015-31No score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
PYSEC-2015-31- Updated
- 2026-11-02
OSVSUSE-SU-2015:1141-1No score
Security update for python-keystoneclient
python-keystoneclient was updated to fix two security issues:
* bsc#928205: S3Token TLS certificate verification option not honored.
(CVE-2015-1852)
* bsc#897103: TLS certificate verification option not honored in paste
configs. (CVE-2014-7144)
Security Issues:
* CVE-2014-7144
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7144>
* CVE-2015-1852
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1852>
- Record
SUSE-SU-2015:1141-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1208-1No score
Security update for python-keystoneclient
The python-keystoneclient was updated to fix one security issues.
The following vulnerability was fixed:
- bsc#928205: S3Token TLS cert verification option not honored (CVE-2015-1852)
- Record
SUSE-SU-2015:1208-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1434-1No score
Security update for python modules
This update provides the following fixes for various python-modules:
python-openstackclient:
- Fix image create location attribute (bnc#932270)
python-novaclient:
- Update novaclient shell to use shared arguments from Session
- Support using the Keystone V3 API from the Nova CLI
python-keystoneclient:
- Fix s3_token middleware parsing insecure option (bsc#928205, CVE-2015-1852)
python-glanceclient:
- remove deprecation warning
- Record
SUSE-SU-2015:1434-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1602-1No score
Security update for python modules
This update for several python modules provides the following security fix and improvements.
python-keystonemiddleware:
- Fix s3_token middleware parsing insecure option (bsc#928205, CVE-2015-1852)
python-novaclient:
- Update novaclient shell to use shared arguments from Session (bnc#933758)
- Support using the Keystone V3 API from the Nova CLI (bnc#933758)
python-swiftclient:
- Add dependency to python-setuptools (bnc#914910)
python-glanceclient:
- Remove deprecation warning
- Record
SUSE-SU-2015:1602-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-1852No score
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
- Record
UBUNTU-CVE-2015-1852- Updated
- 2026-11-02
OSVUSN-2705-1No score
python-keystoneclient, python-keystonemiddleware vulnerabilities
Qin Zhao discovered Keystone disabled certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct machine-in-the-middle attacks via a crafted certificate. (CVE-2014-7144)
Brant Knudson discovered Keystone disabled certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct machine-in-the-middle attacks via a crafted certificate. (CVE-2015-1852)
- Record
USN-2705-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
ubuntu.com/usn/USN-2705-1
lists.openstack.org/pipermail/openstack-announce/2015-April/000350.html
bugs.launchpad.net/keystonemiddleware/+bug/1411063
rhn.redhat.com/errata/RHSA-2015-1685.html
oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
securityfocus.com/bid/74187
Show 31 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-1852
access.redhat.com/errata/RHSA-2015:1677
bugzilla.redhat.com/show_bug.cgi?id=1209527
web.archive.org/web/20200228060649/http://www.securityfocus.com/bid/74187
github.com/pypa/advisory-database/tree/main/vulns/keystonemiddleware/PYSEC-2015-30.yaml
security-tracker.debian.org/tracker/CVE-2015-1852
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1677.json
cve.org/CVERecord?id=CVE-2015-1852
suse.com/support/update/announcement/2015/suse-su-20151141-1
bugzilla.suse.com/897103
ubuntu.com/security/CVE-2015-1852