CVE-2013-6396
Fixed in a distro release EPSS <1%
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Products: openstack swift
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | python-swiftclient | 2.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | python-swiftclient | 1:2.0.2-1 |
| Debian 13 | python-swiftclient | 1:2.0.2-1 |
| Debian 14 | python-swiftclient | 1:2.0.2-1 |