Red Hat Security Advisory

RHSA-2014:1790

openstack-keystone security and bug fix update

Released 2014-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-keystone-2014.1.3-2.el7ost, openstack-keystone-doc-2014.1.3-2.el7ost, python-keystone-2014.1.3-2.el7ost

Fixes 1 record

TI-2014-02942 CVE-2014-3621 · GHSA-8v8f-vc72-pmhc

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1…

LOW 23

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02126 Published 2014-10-02 Fixed in 8.0.0a0 CWE-200