Skip to content
OpenAdvisories

Archive

27 December 2013

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 4.3

    OpenStack Nova uses insecure keystone middleware tmpdir by default

    keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demons…