AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-7144

MEDIUM · CVSS 4.3 EPSS 1.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-10-02 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It may be remotely exploitable.

CVE
CVE-2014-7144
Severity
MEDIUM
CVSS
4.3
EPSS
1.96%

Original NVD Description

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.