CVE-2013-6396
openstack swift: no CVSS score yet. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in python-swiftclient 2.0.
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:swift
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-p3xv-97g8-4wmj | PyPI | python-swiftclient | >=1.0 <2.0 | 2.0 |
| PYSEC-2014-12 | PyPI | python-swiftclient | >=1.0 <2.0 | 2.0 |