CVE

Id
61924  
CVE No.
CVE-2013-1977  
Status
Candidate  
Description
OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620023 61924 CVE-2013-1977 MLIST:[oss-security] 20130419 CVE-2013-1977 - OpenStack keystone.conf insecure file permissions  View
620024 61924 CVE-2013-1977 URL:http://www.openwall.com/lists/oss-security/2013/04/19/2  View
620025 61924 CVE-2013-1977 MLIST:[oss-security] 20130423 Re: CVE-2013-1977 - OpenStack keystone.conf insecure file permissions  View
620026 61924 CVE-2013-1977 URL:http://www.openwall.com/lists/oss-security/2013/04/23/7  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21412 JVNDB-2013-002987 X.org libXext における整数オーバーフローの脆弱性 X.org libXext には、下記の関数の処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2013-1982 61924 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002987.html  View