VYPR

Openstack Essex

Sign in to watch

by Red Hat

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2013-1815Med0.406.10.00Apr 10, 2013A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
CVE-2012-61200.000.00Apr 10, 2013Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.