OpenStack Keystone Grizzly before 2013.1 Folsom and possibly earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a large HTTP request as demonstrated by a long tenant_name when requesting a token.