Unscored CVE-2013-1977 EUVD-2013-1965GHSA-837x-g244-fmm9

OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the …

Published May 21, 2013 · Updated Aug 6, 2024 · Assigned by redhat

Description

OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.

References

https://bugs.launchpad.net/devstack/+bug/1168252
[oss-security] 20130423 Re: CVE-2013-1977 - OpenStack keystone.conf insecure file permissions mailing-list
[oss-security] 20130419 CVE-2013-1977 - OpenStack keystone.conf insecure file permissions mailing-list