CVE:CVE-2014-3621
CNNVD:CNNVD-201409-999
OpenStack是美国美国国家航空航天局（NASA）的一个云平台管理项目。
OpenStack存在信息泄露漏洞。远程攻击者可借助特制的端点利用该漏洞读取敏感的配置选项。
solution:Upgrade openstack keystone to a higher version than 2013.2.3,2014.1.2.1,and avoid the version [2013.2,2013.2.3),[2014.1,2014.1.2.1); Upgrade canonical ubuntu_linux to a higher version than 14.04,and avoid the version 14.04; Upgrade redhat openstack to a higher version than 5.0,4.0,and avoid the version 5.0,4.0