Lucene search
HistoryApr 10, 2013 - 3:55 p.m.
CVE-2013-1815
packstack
red hat openstack
security vulnerability
local users
system modification
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file.
Affected configurations
Node
redhatopenstack_essexMatch-
ORredhatopenstack_folsomMatch-
ORredhatpackstackMatch2012.2.3
Related
prion
prion
Design/Logic Flaw
2013-04-10 15:55:00
nvd
nvd
CVE-2013-1815
2013-04-10 15:55:15
redhat
redhat
(RHSA-2013:0671) Moderate: openstack-packstack security and bug fix update
2013-03-21 00:00:00
cvelist
cvelist
CVE-2013-1815
2013-04-10 15:00:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-1815