PT-2013-3500

CVE-2013-1977

Publicado

2013-05-21

Atualizado

2013-05-22

Descrição por

CVSS 2.0

2.1

Baixa

MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenStack devstack (affected versions not specified)

Description The issue allows local users to obtain sensitive information, including the LDAP password and admin token secret, by reading the keystone.conf file due to its world-readable permissions.

Recommendations For devstack, consider changing the permissions of the keystone.conf file to restrict read access to authorized users only, until a more permanent fix is available.

Explorabilidade

Exploit

Correção

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-264