PT-2013-3405 · Red Hat · Red Hat Openstack Packstack

Derek Higgins + 1 · Published 2013-04-10 · Updated 2026-04-30 · CVE-2013-1815

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions Red Hat OpenStack PackStack versions 2012.2.3

Description The issue allows local users to modify deployed systems by changing the answer file, which can be created in insecure directories such as /tmp or the current working directory.

Recommendations For PackStack version 2012.2.3, consider restricting access to the answer file to prevent local users from modifying deployed systems. As a temporary workaround, ensure that the answer file is created in a secure directory to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-379

CWE-255

Related Identifiers

CVE-2013-1815

RHSA-2013:0671

Affected Products

Red Hat Openstack Packstack

References · 6

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=917904 · Exploit
• http://rhn.redhat.com/errata/RHSA-2013-0671.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1815 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83017 · Note
• https://access.redhat.com/security/cve/CVE-2013-1815 · Note
• https://t.me/cveNotify/161599 · Telegram Post