https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:21:35 +0000 https://vulnerability.circl.lu/vuln/cve-2014-3621 <p>The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by &#34;$(admin_token)&#34; in the publicurl endpoint field.</p> <p>The catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by &#34;$(admin_token)&#34; in the publicurl endpoint field.</p> https://vulnerability.circl.lu/vuln/cve-2014-3621 https://vulnerability.circl.lu/vuln/usn-2406-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: keystone</p> <p>Brant Knudson discovered that OpenStack Keystone did not properly perform input sanitization when performing endpoint catalog substitution. A remote attacker with privileged access for creating endpoints could exploit this to obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: keystone</p> <p>Brant Knudson discovered that OpenStack Keystone did not properly perform input sanitization when performing endpoint catalog substitution. A remote attacker with privileged access for creating endpoints could exploit this to obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-2406-1