CVE-2013-2006
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which...
- Published
- May 21, 2013
- Updated
- Aug 6, 2024
- Assigning CNA
- redhat
- Evidence observed
- Aug 5, 2026
Primary CVSS
nvd · CVSS 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:NLow · next 30 days
- Percentile
- 47.6%
- Model date
- Oct 13, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
Sources
Proof-of-concept exploit for CVE-2013-2006 targeting OpenStack Keystone authentication bypass vulnerability. Includes reference to the vulnerable code commit for testing and verification.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.