En bref
- CVE-2014-2828 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant keystone, keystone (openstack).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.2%, plus élevée que 88.2% des vulnérabilités.
- Correctif : mettre à jour vers 8.0.0a0 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| keystone PyPI | < 8.0.0a0
| 8.0.0a0
|
| keystone | = 2013.1= 2013.1.1= 2013.1.2= 2013.1.3= 2013.2= 2013.2.1= 2013.2.2= 2013.2.3
| No fix yet |
Description
The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."
NVD description
The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free