keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-12-27T01:00:00

Updated: 2024-08-06T15:20:37.504Z

Reserved: 2013-02-19T00:00:00

Link: CVE-2013-2030

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-12-27T01:55:05.237

Modified: 2024-11-21T01:50:53.797

Link: CVE-2013-2030

cve-icon Redhat

Severity : Low

Publid Date: 2013-05-09T00:00:00Z

Links: CVE-2013-2030 - Bugzilla