Red Hat Security Advisory

RHSA-2013:0806

openstack-keystone security and bug fix update

Released 2013-05-09 · Red Hat rating Low · View on Red Hat →

Fixed in

OpenStack Folsom openstack-keystone-2012.2.4-2.el6ost, openstack-keystone-doc-2012.2.4-2.el6ost, python-keystone-2012.2.4-2.el6ost

Fixes 1 record

TI-2013-01778 CVE-2013-2006 · GHSA-rxrm-xvp4-jqvh

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs…

LOW 12

OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00602 Published 2013-05-21 Fixed in 8.0.0a0 CWE-200