CVE-2013-1815

2013-04-1015:00:00

redhat

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file.

References

rhn.redhat.com/errata/RHSA-2013-0671.html

bugzilla.redhat.com/show_bug.cgi?id=917904

exchange.xforce.ibmcloud.com/vulnerabilities/83017