PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file.
References
Link | Resource |
---|---|
http://rhn.redhat.com/errata/RHSA-2013-0671.html | Vendor Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=917904 | Exploit |
https://exchange.xforce.ibmcloud.com/vulnerabilities/83017 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-04-10 08:55
Updated : 2017-08-28 18:33
NVD link : CVE-2013-1815
Mitre link : CVE-2013-1815
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
redhat
- packstack
- openstack_folsom
- openstack_essex