PT-2013-3405 · Red Hat · Red Hat Openstack Packstack

Derek Higgins + 1 · Publicado 2013-04-10 · Atualizado 2026-04-30 · CVE-2013-1815

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions Red Hat OpenStack PackStack versions 2012.2.3

Description The issue allows local users to modify deployed systems by changing the answer file, which can be created in insecure directories such as /tmp or the current working directory.

Recommendations For PackStack version 2012.2.3, consider restricting access to the answer file to prevent local users from modifying deployed systems. As a temporary workaround, ensure that the answer file is created in a secure directory to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-379

CWE-255

Identificadores relacionados

CVE-2013-1815

RHSA-2013:0671

Produtos afetados

Red Hat Openstack Packstack

Referências · 6

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=917904 · Exploit
• http://rhn.redhat.com/errata/RHSA-2013-0671.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1815 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83017 · Nota
• https://access.redhat.com/security/cve/CVE-2013-1815 · Nota
• https://t.me/cveNotify/161599 · Publicação no Telegram