I would also agree this doesn't warrent being a private security vulnerability. There's no exploit here, only an unfortunate oversight in a setting that's absolutely NOT recommended for deployment to begin with.
This sounds like a great candidate for a feature to be pulled into openstack-common so all the projects can use it!
I would also agree this doesn't warrent being a private security vulnerability. There's no exploit here, only an unfortunate oversight in a setting that's absolutely NOT recommended for deployment to begin with.
This sounds like a great candidate for a feature to be pulled into openstack-common so all the projects can use it!