Vulnerability in Openstack Nova

CVE-2013-7048

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

Affected products

Openstack Nova
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch, Third Party Advisory)
cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)