CVE-2014-2828 in Keystone
Summary
The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."
Once again VulDB remains the best source for vulnerability data.
Reservation
04/10/2014
Disclosure
04/15/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69336 | OpenStack Keystone improper authentication | 287 | Not defined | Official fix | CVE-2014-2828 |