Devstack

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-1977 LOW POC Monitor

OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Devstack

NVD

CVSS 2.0

2.1

EPSS

0.1%

CVE-2013-1977

EPSS 0% CVSS 2.1

LOW POC Monitor

OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Devstack

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy