python-keystoneclient

  1. Bug #1534284
  2. Comment #5

Comment 5 for bug 1534284

Revision history for this message
Tristan Cacqueray (tristan-cacqueray) wrote : Re: keystoneclient should not use etree XML parsing

Adding keystone-coresec for further investigation.

So in order to impersonate Service Provider response or the Identity Provider response, these endpoints need to be in http right ? If so, this is likely a C1 type of bug (according to https://security.openstack.org/vmt-process.html#incident-report-taxonomy ).