Archive
27 December 2013
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 4.3
OpenStack Nova uses insecure keystone middleware tmpdir by default
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demons…