Description
tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 1 | python-keystone +3 | 2012.1.3-3.el6 | RHSA-2012:1556 |
Advisories 1
- RHSA-2012:1556 Red Hat Security Advisory: openstack-keystone security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 8, 2026
References
- 56888 vdb-entry
- RHSA-2012:1556 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=873447
- keystone-secret-key-info-disc(80612) vdb-entry
- FEDORA-2012-19341 vendor-advisory