tocsin

Debian/keystone: unknown

The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoi

Action: Upgrade keystone to 2014.1.3-1 or later.

Affected

introducedfixedlast affected
02014.1.3-1-

Fixed versions

2014.1.3-1

Sources

published · modified · JSON