CVE-2014-2828: Openstack Keystone

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

The V3 API in OpenStack Identity (Keystone) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service (CPU consumption) via a large number of the same authentication method in a request, aka "authentication chaining."

Affected products

• Openstack Keystone: version 2013.1 only; version 2013.1.1 only; version 2013.1.2 only; version 2013.1.3 only; version 2013.2 only; version 2013.2.1 only; …

Published 2014-04-15. Last modified 2026-06-17.