CVE-2013-2030 in Havana
Summary
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/19/2013
Disclosure
12/26/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65893 | OpenStack Havana Certificates access control | 264 | Not defined | Not defined | CVE-2013-2030 |