CVE-2013-2030
published 2013-12-27CVE-2013-2030: keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which…
low2.1CVSS 3.1
AVLACLAuNCNIPAN
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nova | — | — |
| openstack | compute | — | — |
| openstack | compute | — | — |
| openstack | compute | — | — |
| openstack | compute | — | — |
| openstack | grizzly | — | — |
| openstack | havana | — | — |
| openstack | havana | — | — |
| openstack | havana | — | — |