CVE-2012-5483 in Keystoneinfo

Summary

tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

10/24/2012

Disclosure

12/26/2012

Entries

1: VDB-63260

CPE

ready

CVSS

4.0

EPSS

0.00111

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!