{"id":"CVE-2014-3621","aliases":["GHSA-8v8f-vc72-pmhc","PYSEC-2026-653"],"title":"OpenStack Identity Keystone Exposure of Sensitive Information","summary":"OpenStack Identity Keystone Exposure of Sensitive Information","severity":"medium","vendor":"keystone","product":"keystone","ecosystem":"pip","affected":["keystone < 8.0.0a0"],"patched":["keystone 8.0.0a0"],"published":"2022-05-13","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-8v8f-vc72-pmhc","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3621"},{"url":"https://github.com/openstack/keystone/commit/2989ff257e4fde6a168e25b926805e700406aa80"},{"url":"https://github.com/openstack/keystone/commit/52714633c9a4dae5e60279217090859aa6dbcb4f"},{"url":"https://access.redhat.com/errata/RHSA-2014:1688"},{"url":"https://access.redhat.com/errata/RHSA-2014:1789"},{"url":"https://access.redhat.com/errata/RHSA-2014:1790"},{"url":"https://access.redhat.com/security/cve/CVE-2014-3621"},{"url":"https://bugs.launchpad.net/keystone/+bug/1354208"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139937"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1688.html"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1789.html"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1790.html"},{"url":"http://www.openwall.com/lists/oss-security/2014/09/16/10"},{"url":"http://www.ubuntu.com/usn/USN-2406-1"}],"tags":["osv","pip"],"epss":0.02126,"epssPercentile":0.80856,"ingestedAt":"2026-07-08T18:25:47.546Z","slug":"CVE-2014-3621","body":"## Overview\n\nThe catalog url replacement in OpenStack Identity (Keystone) before 2013.2.3 and 2014.1 before 2014.1.2.1 allows remote authenticated users to read sensitive configuration options via a crafted endpoint, as demonstrated by \"$(admin_token)\" in the publicurl endpoint field.\n\n## Affected packages\n\n- `keystone < 8.0.0a0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `keystone 8.0.0a0`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0.4,"exploitation":0,"ransomware":0},"changes":[]}