redhat openstack folsom vulnerabilities

Latest redhat openstack folsom CVEs

Newest publication first

1. CVE-2013-1815 Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation

   Published 2013-04-10

   Medium·CVSS 6.1 EPSS 0.45%

   A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modi...

2. CVE-2012-6120 Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.

   Published 2013-04-10

   Low·CVSS 2.1 EPSS 0.39%

   Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.