| Package | Affected versions | Patched versions |
|---|---|---|
| keystone | < 8.0.0a0 | 8.0.0a0 |
| keystone | = 2013.1≥ 2012.1, ≤ 2012.1.3≥ 2012.2, ≤ 2012.2.4 |
OpenStack Keystone Grizzly before 2013.1, Folsom, and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request, as demonstrated by a long tenant_name when requesting a token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free