TI-2014-02846 Aliases CVE-2014-3520 GHSA-mv96-4gm9-mjhw

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before…

LOW 33CWE-863Published 2014-10-26 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: Partial · Partial · Partial
Fix status: Partial Red Hat: 2 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-863.

Summary

OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which the trustor has certain roles via the project ID in a V2 API trust token request.

Why it matters now

EPSS 0.01907 79th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Partial Red Hat: 1 advisoryRed Hat: 2 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:openstack:keystone::::::::	2013.2 to before 2013.2.4; 2014.1 to before 2014.1.2	Vulnerable	OpenStack

cpe:2.3:a:openstack:keystone:*:*:*:*:*:*:*:* Versions 2013.2 to before 2013.2.4; 2014.1 to before 2014.1.2 Vulnerable ·OpenStack

Remediation

Red Hat 1 advisory

RHSA-2014:0994 Released 2014-07-31 · Red Hat rating Important
openstack-keystone security update
- Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-keystone-2013.1.5-3.el6ost, openstack-keystone-doc-2013.1.5-3.el6ost, python-keystone-2013.1.5-3.el6ost
- Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-keystone-2013.2.3-7.el6ost, openstack-keystone-doc-2013.2.3-7.el6ost, python-keystone-2013.2.3-7.el6ost

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)	Affected	No fix yet
Red Hat Enterprise Linux OpenStack Platform 3.0	Fixed	RHSA-2014:0994
Red Hat Enterprise Linux OpenStack Platform 4.0	Fixed	RHSA-2014:0994

Timeline

2026-10-02 Threatist record created from CVE-2014-3520
2026-10-03 Alias added: GHSA-mv96-4gm9-mjhw

References

Exploit 1

https://bugs.launchpad.net/keystone/+bug/1331912

Patch 1

[openstack-announce] 20140702 [OSSA 2014-022] Keystone V2 trusts privilege escalation through user supplied project id (CVE-2014-3520)

TI-2026-25942 Incorrect authorization in OpenStack Keystone CVSS 3.1MEDIUM 5.3
TI-2020-10091 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. CVSS 3.1HIGH 8.8
TI-2020-10090 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. CVSS 3.1HIGH 8.8
TI-2019-14184 OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials… CVSS 3.1HIGH 8.8
TI-2020-10089 An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. CVSS 3.1HIGH 8.8
TI-2014-02273 The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before… CVSS 2.0HIGH 7.8

See all 43 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences