Lucene search
HistoryJan 23, 2014 - 9:55 p.m.
CVE-2013-7048
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Affected configurations
Node
openstacknovaRange2013.1–2013.1.4
ORopenstacknovaRange2013.2–2013.2.1
Related
nessus
nessus
Fedora 20 : openstack-nova-2013.2.2-1.fc20 (2014-2554)
2014-02-26 00:00:00
Fedora 19 : openstack-nova-2013.1.5-1.fc19 (2014-4188)
2014-04-03 00:00:00
ubuntucve
ubuntucve
CVE-2013-7048
2014-01-23 00:00:00
cvelist
cvelist
CVE-2013-7048
2014-01-23 21:00:00
github
github
OpenStack Nova live snapshots use an insecure local directory
2022-05-14 01:58:45
debiancve
debiancve
CVE-2013-7048
2014-01-23 21:55:04
cve
cve
CVE-2013-7048
2014-01-23 21:55:04
prion
prion
Design/Logic Flaw
2014-01-23 21:55:00
ibm
ibm
seebug
seebug
OpenStack Compute (Nova) 不安全目录权限漏洞
2013-12-13 00:00:00
redhat
redhat
(RHSA-2014:0366) Moderate: openstack-nova security and bug fix update
2014-04-03 00:00:00
(RHSA-2014:0231) Moderate: openstack-nova security and bug fix update
2014-03-04 00:00:00
openvas
openvas
Fedora Update for openstack-nova FEDORA-2014-2554
2014-02-25 00:00:00
Fedora Update for openstack-nova FEDORA-2014-2554
2014-02-25 00:00:00
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-nova-2013.2.2-1.fc20
2014-02-25 07:53:02
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.5-1.fc19
2014-04-02 09:14:29
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:57:31
Infomation Disclosure
2019-05-02 04:57:32
Privilege Escalation
2019-05-02 04:57:32
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2013-7048