OpenStack Identity Keystone Exposure of Sensitive Information
The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by "$(admin_token)" in the publicurl endpoint field.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-3621US | medium4.0 | — | ||
The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options… | ||||
02
references
External citations — patches, advisories, analysis.
- http://rhn.redhat.com/errata/RHSA-2014-1688.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1789.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2014-1790.htmlWEB
- http://www.openwall.com/lists/oss-security/2014/09/16/10WEB
- http://www.ubuntu.com/usn/USN-2406-1WEB
- https://access.redhat.com/errata/RHSA-2014:1688WEB
- https://access.redhat.com/errata/RHSA-2014:1789WEB
- https://access.redhat.com/errata/RHSA-2014:1790WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan