vulnwire
5.3med

CVE-2018-14432

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" requ…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 76%
Public exploits
0
none known

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all projects in the deployment and their attributes. Only Keystone with the /v3/OS-FEDERATION endpoint enabled via policy.json is affected.

Exploit prediction (EPSS)

1.60% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.3CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD2.03.5AV:N/AC:M/Au:S/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • access.redhat.com /errata/RHSA-2018:2543 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2018:2533 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • openwall.com /lists/oss-security/2018/07/25/2 · mailing-list, x_refsource_MLIST, x_transferred
  • access.redhat.com /errata/RHSA-2018:2523 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /bid/104930 · vdb-entry, x_refsource_BID, x_transferred
  • debian.org /security/2018/dsa-4275 · vendor-advisory, x_refsource_DEBIAN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.