Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5483
HistoryDec 26, 2012 - 12:00 a.m.

CVE-2012-5483

2012-12-2600:00:00
ubuntu.com
ubuntu.com
14

0.0004 Low

EPSS

Percentile

5.2%

tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon
Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable
permissions for /etc/keystone/ec2rc, which allows local users to obtain
access to EC2 services by reading administrative access and secret values
from this file.

Notes

Author Note
jdstrand /etc/keystone permissions protect against this (0700 keystone:keystone)

0.0004 Low

EPSS

Percentile

5.2%