Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-3621
HistoryOct 02, 2014 - 2:55 p.m.

Code injection

2014-10-0214:55:00
PRIOn knowledge base
www.prio-n.com
5

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by “$(admin_token)” in the publicurl endpoint field.

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%