Unrated severityNVD Advisory· Published Aug 20, 2013· Updated Jun 16, 2026

CVE-2013-2157

Description

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenStack/Keystone2 versions
cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*range: >=2012.2,<=2012.2.4
- (no CPE)range: <2013.1.3

Patches

Vulnerability mechanics

References

rhn.redhat.com/errata/RHSA-2013-0994.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1083.htmlnvdThird Party Advisory
www.openwall.com/lists/oss-security/2013/06/13/3nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/60545nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000