Every CVE Search/ Get API key

CVE-2013-2013

python-keystoneclient unsecure user password update

2.1 LowFix available

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Exploit likelihood

0.37%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
CVE-2013-2013
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
CVE-2013-2013
Updated
2026-11-02
EUVDEUVD-2013-0032 No score

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
EUVD-2013-0032
Updated
2026-11-03
GitHub AdvisoriesGHSA-8q2m-pwxf-jc7g 2.9

python-keystoneclient unsecure user password update

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
GHSA-8q2m-pwxf-jc7g
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVGHSA-8q2m-pwxf-jc7g 2.9

python-keystoneclient unsecure user password update

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
GHSA-8q2m-pwxf-jc7g
CVSS 3.1
2.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSV No score

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
CVE-2013-2013
Updated
2026-11-02
OSVDEBIAN-CVE-2013-2013 No score

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
DEBIAN-CVE-2013-2013
Updated
2026-11-02
OSVPYSEC-2013-24 No score

The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the process.

Record
PYSEC-2013-24
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python-keystoneclient
PyPI
 before 0.2.4
0.2.4
python-keystoneclient
Debian:12
 before 1:0.2.5-1
1:0.2.5-1
python-keystoneclient
Debian:13
 before 1:0.2.5-1
1:0.2.5-1
python-keystoneclient
Debian:14
 before 1:0.2.5-1
1:0.2.5-1
python-keystoneclient
PyPI
 before 0.2.4, plus listed versions
0.1.10.1.20.1.30.2.00.2.10.2.20.2.3
0.2.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-2013 is a low vulnerability (CVSS 2.1) in Openstack Python-keystoneclient, published October 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in python-keystoneclient 0.2.4.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open