NVD

Id
38100  
Name
CVE-2013-1977  
Description
OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-05-21  
Modified Date
2013-05-22  
Seq
2013-1977  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194750 38100 CVE-2013-1977 [oss-security] 20130419 CVE-2013-1977 - OpenStack keystone.conf insecure file permissions  View
194751 38100 CVE-2013-1977 [oss-security] 20130423 Re: CVE-2013-1977 - OpenStack keystone.conf insecure file permissions  View
194752 38100 CVE-2013-1977 https://bugs.launchpad.net/devstack/+bug/1168252  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21199 JVNDB-2013-002774 OpenStack DevStack における重要な情報を取得される脆弱性 OpenStack DevStack には、keystone.conf に対して誰でも読むことができる権限 (world-readable permission) を使用するため、LDAP パスワードまたは admin_token secret などの重要な情報を取得される脆弱性が存在します。 CVE-2013-1977 61919 CVE-2013-1977 38100 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002774.html 2013-05-21 2013-05-23 View