Read the docs
TI-2014-02803 Aliases CVE-2014-3476GHSA-274v-r947-v34r

OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before…

Priority LOW 31CWE-269Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Privilege escalation
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Partial Red Hat: 2 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-269.

Summary

OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles.

Why it matters now

EPSS 0.02327 83rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial keystone (PyPI): 8.0.0a0Red Hat: 1 advisoryRed Hat: 2 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—keystone (PyPI)before 8.0.0a08.0.0a0Patch availableGHSA-274v-r947-v34r
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • keystone (PyPI) Vendor— Affected before 8.0.0a0 Fixed in 8.0.0a0 Patch available GHSA-274v-r947-v34r

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:*2013.2 to before 2013.2.4; 2014.1 to before 2014.1.2VulnerableOpenStack
cpe:2.3:a:suse:cloud:3:*:*:*:*:*:*:*3VulnerableSUSE
  • cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:* Versions 2013.2 to before 2013.2.4; 2014.1 to before 2014.1.2 Vulnerable ·OpenStack
  • cpe:2.3:a:suse:cloud:3:*:*:*:*:*:*:* Versions 3 Vulnerable ·SUSE

Remediation

  • Fix · GHSA-274v-r947-v34r keystone (PyPI) Fixed in 8.0.0a0 Advisory →

Red Hat 1 advisory

  • RHSA-2014:0994 Released 2014-07-31 · Red Hat rating Important
    openstack-keystone security update
    • Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-keystone-2013.1.5-3.el6ost, openstack-keystone-doc-2013.1.5-3.el6ost, python-keystone-2013.1.5-3.el6ost
    • Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-keystone-2013.2.3-7.el6ost, openstack-keystone-doc-2013.2.3-7.el6ost, python-keystone-2013.2.3-7.el6ost

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)AffectedNo fix yet
Red Hat Enterprise Linux OpenStack Platform 3.0Fixed RHSA-2014:0994
Red Hat Enterprise Linux OpenStack Platform 4.0Fixed RHSA-2014:0994

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-3476
  2. 2026-10-03 Alias added: GHSA-274v-r947-v34r

References

Exploit 1

Patch 1

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences