OpenStack Keystone CVE-2018-14432 Information Disclosure Vulnerability

Bugtraq ID:	104930
Class:	Design Error
CVE:	CVE-2018-14432
Remote:	No
Local:	Yes
Published:	Jul 25 2018 12:00AM
Updated:	Jul 25 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Redhat OpenStack Platform 9.0 Redhat OpenStack Platform 8.0 (Liberty) Redhat OpenStack Platform 13.0 (Queens) Redhat OpenStack Platform 12 Redhat OpenStack Platform 10 Redhat JBoss Fuse 6.0 Redhat JBoss Fuse 7.0 Redhat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 OpenStack Keystone 11.0.3 OpenStack Keystone 11.0 OpenStack Keystone 10.0.1 OpenStack Keystone 10.0
Not Vulnerable:	OpenStack Keystone 13.0 OpenStack Keystone 12.0 OpenStack Keystone 11.0.4

OpenStack Keystone CVE-2018-14432 Information Disclosure Vulnerability

OpenStack Keystone is prone to an information-disclosure vulnerability.

An attacker may leverage this issue to obtain potentially sensitive information that may aid in further attacks.

OpenStack Keystone CVE-2018-14432 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenStack Keystone CVE-2018-14432 Information Disclosure Vulnerability

References:

• OpenStack Keystone Homepage (OpenStack )
  
• Bug 1606868 - (CVE-2018-14432) CVE-2018-14432 openstack-keystone: Information E (Redhat)
  
• CVE-2018-14432 (Redhat)