Unscored severity · published Aug 20, 2013
CVE-2013-2157
OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password
–
CVSS
3.1%
EPSS
No
On KEV
Description
OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keystone · Openstack
2012.2 through 2012.2.4; 2013.1 before 2013.1.3; 2013.2 through 2013.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2157
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0994.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-1083.html
Mailing List
http://www.openwall.com/lists/oss-security/2013/06/13/3
Third Party Advisory
http://www.securityfocus.com/bid/60545
More from Keystone
8.8
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2020-12691
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0
8.8
CVE-2020-12690
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0