Red Hat Security AdvisoryRHSA-2014:1688
openstack-keystone security and bug fix update
Released 2014-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-keystone-2013.2.4-1.el6ost, openstack-keystone-doc-2013.2.4-1.el6ost, python-keystone-2013.2.4-1.el6ost
Fixes 2 records
Priority MEDIUM 40
The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication met…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03216 · Published 2014-04-15 · Partial fix · 8.0.0a0 CWE-287
Priority LOW 23
The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02126 · Published 2014-10-02 · Fixed in 8.0.0a0 CWE-200
