Configuration Option Leak in OpenStack Identity Keystone
CVE-2014-3621

Currently unrated

Key Information:

Vendor: Openstack
Status: Keystone
Vendor: CVE Published:; 2 October 2014

What is CVE-2014-3621?

The vulnerability in OpenStack Identity (Keystone) allows authenticated remote users to access sensitive configuration options by manipulating the endpoint. This is achieved through a crafted request that exploits the catalog URL replacement feature, exposing potentially critical data like the 'admin_token' via the public URL endpoint field. This flaw underscores the importance of secure configurations and appropriate access controls in identity management systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch