CVE-2014-2828

Published: Apr 15, 2014Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."

Affected (8)

Products: Openstack: Keystone

Openstack

1 product

Keystone

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Openstack Keystone	Version 2013.1.1
Openstack Keystone	Version 2013.1.2
Openstack Keystone	Version 2013.1.3
Openstack Keystone	Version 2013.1
Openstack Keystone	Version 2013.2.1
Openstack Keystone	Version 2013.2.2
Openstack Keystone	Version 2013.2.3
Openstack Keystone	Version 2013.2