OpenStack Security Advisory

  1. Bug #1779205
  2. Comment #20

Comment 20 for bug 1779205

Revision history for this message
Lance Bragstad (lbragstad) wrote : Re: GET /v3/OS-FEDERATION/projects leaks project information

The API for accessing domains isn't actually affected. Based on what Kristi and I have been able to recreate, only GET /v3/OS-FEDERATION/projects is affected.

Kristi did have a case where he was seeing a "domain mismatch" that we should try and include as a testcase in the patch.