[Openstack-security] [Bug 938315] Re: [OSSA-2013-013] Updating password via keystoneclient CLI should be done securely

Ken ktorkura at yahoo.com
Tue Sep 22 08:55:57 UTC 2015


** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3594

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/938315

Title:
  [OSSA-2013-013] Updating password via keystoneclient CLI should be
  done securely

Status in OpenStack Security Advisory:
  Fix Released
Status in python-keystoneclient:
  Fix Released

Bug description:
  Updating password via CLI should be done via a secure password prompt,
  not text.

  current: keystone user-password-update --user=jake --password=foo

  expected: keystone user-password-update --user=jake
                          Password:
                          Repeat Password:

To manage notifications about this bug go to:
https://bugs.launchpad.net/ossa/+bug/938315/+subscriptions




More information about the Openstack-security mailing list