CVE-2013-2030: Insecure Temporary Directory in OpenStack Nova Keystone Middleware
Summary
CVE-2013-2030: OpenStack Nova uses insecure keystone middleware tmpdir by default. Affects python-keystoneclient versions < 0.2.4. Fixed in 0.2.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenStack Nova is an open-source cloud computing platform that provides virtual machines, networking, and storage services. It utilizes the Keystone middleware for authentication and authorization. The keystone/middleware/auth_token.py module in OpenStack Nova Folsom, Grizzly, and Havana versions uses an insecure temporary directory for storing signing certificates. This vulnerability allows local users to spoof servers by pre-creating the directory, which is reused by Nova. An attacker can exploit this vulnerability to impersonate a trusted server and potentially gain unauthorized access to sensitive information or perform malicious actions.
Vulnerability Detail
The vulnerability arises from the use of an insecure temporary directory for storing signing certificates in OpenStack Nova. By pre-creating the directory, an attacker can trick Nova into using their own certificates, allowing them to impersonate a trusted server. This can lead to various security risks, such as unauthorized access to sensitive data, manipulation of cloud resources, or disruption of services. The vulnerability has a CVSS score of 4.3, indicating a moderate severity level.
How To Fix
Latest published version: 6.0.0 as of 23 Oct 2026
pip install --upgrade "python-keystoneclient==6.0.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.2.4
This is the first release that contains the fix.
pip install --upgrade "python-keystoneclient==0.2.4"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, users can mitigate the risk by ensuring the integrity of the temporary directory used by Keystone middleware. This can be achieved by setting appropriate permissions and access controls for the directory, limiting write access to trusted users or processes only.
Conclusion
In summary, the OpenStack Nova Keystone middleware is vulnerable to an insecure temporary directory issue, which can be exploited by local users to impersonate trusted servers. Upgrading the python-keystoneclient package to version 0.2.4 or higher is the recommended solution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python-keystoneclient →
FAQ
OpenStack Nova is an open-source cloud computing platform that provides virtual machines, networking, and storage services.
The Keystone middleware is used in OpenStack Nova for authentication and authorization purposes.
This vulnerability allows local users to spoof servers and potentially gain unauthorized access to sensitive information or perform malicious actions.
The CVSS score of this vulnerability is 4.3, indicating a moderate severity level.
To fix this vulnerability, it is recommended to upgrade the python-keystoneclient package to version 0.2.4 or higher.
References
Related vulnerabilities
Recent vulnerabilities recorded for python-keystoneclient.
