VULNERABILITY INTELLIGENCE
CVE-2014-2828
CVSS score7.8 HIGH
EPSS probability3.22%
CISA KEVNot currently listed
Published2014-04-15
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."
Weakness classification
- CWE-287: Improper Authentication