Every CVE Search/ Get API key

CVE-2015-3646

OpenStack Keystone Logs Passwords

4.0 MediumFix available

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Exploit likelihood

2.88%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.0

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
CVE-2015-3646
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
CVE-2015-3646
Updated
2026-11-02
EUVDEUVD-2022-4448 No score

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
EUVD-2022-4448
Updated
2026-11-03
GitHub AdvisoriesGHSA-jwpw-ppj5-7h4w No score

OpenStack Keystone Logs Passwords

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
GHSA-jwpw-ppj5-7h4w
Weakness
CWE-200
Updated
2026-11-02
OSV No score

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
CVE-2015-3646
Updated
2026-11-02
OSVDEBIAN-CVE-2015-3646 No score

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
DEBIAN-CVE-2015-3646
Updated
2026-11-02
Show 4 moreShow less
OSVGHSA-jwpw-ppj5-7h4w No score

OpenStack Keystone Logs Passwords

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
GHSA-jwpw-ppj5-7h4w
Weakness
CWE-200
Updated
2026-11-02
OSVPYSEC-2026-655 No score

OpenStack Keystone Logs Passwords

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
PYSEC-2026-655
Updated
2026-11-02
OSVSUSE-SU-2016:2325-1 No score

Security update for openstack-keystone, openstack-nova, and openstack-swift

This update for openstack-keystone, openstack-nova, and openstack-swift fixes the following issues:

  • Fix hybrid backend from keystone v3 (bsc#967356)
  • Fix cleanup when block migration fails (bsc#960015)
  • Avoid host data leak (bsc#960601, CVE-2015-7548)
  • Fix init script for openstack-swift-object-expirer
  • Mark backend_argument as secret (bsc#929628, CVE-2015-3646)
Record
SUSE-SU-2016:2325-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-3646 No score

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keystone logs.

Record
UBUNTU-CVE-2015-3646
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
keystone
PyPI
 2014.2 up to 2014.2.4
2014.2.4
keystone
PyPI
 2011.3 up to 2014.1.5
2014.1.5
keystone
Debian:12
 before 2015.1.0-1
2015.1.0-1
keystone
Debian:13
 before 2015.1.0-1
2015.1.0-1
keystone
Debian:14
 before 2015.1.0-1
2015.1.0-1
keystone
PyPI
 2011.3 up to 2014.1.5, 2014.2 up to 2014.2.4
2014.1.52014.2.4
openstack-keystone
SUSE:OpenStack Cloud 5
From an advisory covering 2 CVEs
 before 2014.2.4.juno-17.1
2014.2.4.juno-17.1
openstack-keystone-doc
SUSE:OpenStack Cloud 5
From an advisory covering 2 CVEs
 before 2014.2.4.juno-17.2
2014.2.4.juno-17.2
openstack-nova
SUSE:OpenStack Cloud 5
From an advisory covering 2 CVEs
 before 2014.2.4.juno-29.1
2014.2.4.juno-29.1
openstack-nova-doc
SUSE:OpenStack Cloud 5
From an advisory covering 2 CVEs
 before 2014.2.4.juno-29.1
2014.2.4.juno-29.1
openstack-swift
SUSE:OpenStack Cloud 5
From an advisory covering 2 CVEs
 before 2.1.0-14.1
2.1.0-14.1
openstack-swift-doc
SUSE:OpenStack Cloud 5
From an advisory covering 2 CVEs
 before 2.1.0-14.1
2.1.0-14.1

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3646 is a medium vulnerability (CVSS 4.0) in Openstack Keystone, published May 12, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.88%, the 86th percentile. Fixed in keystone 2014.2.4.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open