{"action":"Upgrade keystone to 8.0.0a0 or later.","affected":[{"fixed":"8.0.0a0","introduced":"0"}],"component":"keystone","cve_ids":["CVE-2014-3621"],"ecosystem":"PyPI","epss":0.02126,"exploited":false,"fixed_versions":["8.0.0a0"],"ghsa_id":"GHSA-8v8f-vc72-pmhc","id":"tcs_01M5KF945QAQ7FA4CGD2FMTMWZ","modified_at":"2026-07-06T08:11:06.889040322Z","published_at":"2022-05-13T01:26:10Z","references":["https://osv.dev/vulnerability/GHSA-8v8f-vc72-pmhc","https://nvd.nist.gov/vuln/detail/CVE-2014-3621","https://github.com/openstack/keystone/commit/2989ff257e4fde6a168e25b926805e700406aa80","https://github.com/openstack/keystone/commit/52714633c9a4dae5e60279217090859aa6dbcb4f","https://access.redhat.com/errata/RHSA-2014:1688","https://access.redhat.com/errata/RHSA-2014:1789","https://access.redhat.com/errata/RHSA-2014:1790","https://access.redhat.com/security/cve/CVE-2014-3621","https://bugs.launchpad.net/keystone/+bug/1354208","https://bugzilla.redhat.com/show_bug.cgi?id=1139937","http://rhn.redhat.com/errata/RHSA-2014-1688.html","http://rhn.redhat.com/errata/RHSA-2014-1789.html","http://rhn.redhat.com/errata/RHSA-2014-1790.html","http://www.openwall.com/lists/oss-security/2014/09/16/10","http://www.ubuntu.com/usn/USN-2406-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8v8f-vc72-pmhc","url":"https://osv.dev/vulnerability/GHSA-8v8f-vc72-pmhc"}],"summary":"OpenStack Identity Keystone Exposure of Sensitive Information"}