CVE-2014-0105

CVE-2014-0105 describes a privilege escalation vulnerability in the auth_token middleware of the OpenStack Python client library for Keystone (python-keystoneclient) prior to version 0.7.0. This flaw, stemming from an interaction between eventlet and python-memcached, prevents proper retrieval of user tokens from memcache. Authenticated attackers could exploit this by sending numerous requests, potentially gaining elevated privileges under specific conditions. The vulnerability has a CVSS score of 6.0, indicating a medium severity. It requires authenticated access (Au:S) and medium attack complexity (AC:M) over a network (AV:N), with potential for partial confidentiality, integrity, and availability impact (C:P/I:P/A:P). There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and limited exploitation interest.