PT-2013-3512 · Openstack · Openstack Nova

Publicado 2013-12-27 · Atualizado 2022-05-17 · CVE-2013-2030

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenStack Nova versions Folsom through Havana

Description The issue is related to the use of an insecure temporary directory for storing signing certificates in the keystone/middleware/auth token.py module. This allows local users to potentially spoof servers by pre-creating the directory, which is then reused by Nova. An example of this exploit is demonstrated on Fedora using the /tmp/keystone-signing-nova directory.

Recommendations For OpenStack Nova versions Folsom through Havana, consider restricting access to the temporary directory used for storing signing certificates to prevent local users from spoofing servers. As a temporary workaround, restrict access to the /tmp/keystone-signing-nova directory to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

CWE-1188

Identificadores relacionados

CVE-2013-2030

GHSA-PXXV-RV32-2QGV

Produtos afetados

Openstack Nova

Referências · 13

• https://github.com/openstack/nova · Nota
• https://github.com/openstack/nova/commit/74aa04e2ca7942cb1e1a86dcbaffeb72d260ccd7 · Nota
• https://github.com/openstack/nova/commit/7bf3e8d3e254d817ff5ae7ef1f2884b10410ca60 · Nota
• https://github.com/openstack/nova/commit/58d6879b1caaa750c39c8e452a0634c24ffef2ce · Nota
• https://github.com/openstack/python-keystoneclient/commit/1736e2ffb12f70eeebed019448bc14def48aa036 · Nota
• https://github.com/pypa/advisory-database/tree/main/vulns/nova/PYSEC-2013-45.yaml · Nota
• https://bugs.launchpad.net/nova/+bug/1174608 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2030 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=958285 · Nota
• http://lists.openstack.org/pipermail/openstack-announce/2013-May/000098.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/05/09/2 · Nota
• https://osv.dev/vulnerability/GHSA-pxxv-rv32-2qgv · Aviso do Fabricante