summaryrefslogtreecommitdiff
path: root/releasenotes/notes/bug-1688137-e4203c9a728690a7.yaml
blob: bd7a0606949edfbd2db64ac5302b7b79e4154667 (plain)
1
2
3
4
5
6
7
8
---
fixes:
  - |
    [`bug 1688137 <https://bugs.launchpad.net/keystone/+bug/1688137>`_]
    Fixed the AccountLocked exception being shown to the end user since
    it provides some information that could be exploited by a
    malicious user. The end user will now see Unauthorized instead of
    AccountLocked, preventing user info oracle exploitation.