1 result · Clear filters · Feed
-
Medium 6.3
Openstack tripleo-heat-templates unauthenticated file access
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as tho…