Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenStack Keystone 信息泄露漏洞
Vulnerability Description
OpenStack是美国国家航空航天局(National Aeronautics and Space Administration)和美国Rackspace公司合作研发的一个云平台管理项目。OpenStack Identity(又名Keystone)是其中的一个用于身份验证的项目,提供身份、令牌、目录和策略服务。 OpenStack Identity 2014.1.5之前版本和2014.2.4之前2014.2.x版本中存在安全漏洞,该漏洞源于程序记录backend_argument配置选项内容。远程攻击者
CVSS Information
N/A
Vulnerability Type
N/A