Lucene search

K
cvelistRedhatCVELIST:CVE-2014-3621
HistoryOct 02, 2014 - 2:00 p.m.

CVE-2014-3621

2014-10-0214:00:00
redhat
www.cve.org
5

AI Score

5.7

Confidence

Low

EPSS

0.003

Percentile

71.4%

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by “$(admin_token)” in the publicurl endpoint field.

AI Score

5.7

Confidence

Low

EPSS

0.003

Percentile

71.4%