Skip to content
OpenAdvisories
Unscored RHSA-2014:1790 1 CVE

Red Hat Security Advisory: openstack-keystone security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 openstack-keystone 0:2014.1.3-2.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-keystone-doc 0:2014.1.3-2.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-keystone 0:2014.1.3-2.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2014-3621

    OpenStack Identity Keystone Exposure of Sensitive Information

    The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by "$(admin_token)" in the publicurl en…

    keystone keystone keystone Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1113534
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1116551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1139937
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1140152
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1149425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1149736
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1790.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3621
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3621
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3621