Redhat Openstack Essex vulnerabilities

3 vulnerabilities

Known vulnerabilities in Redhat Openstack Essex, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2013-1793openstack-utilsopenstack-db program+2
EPSS score
1.03%
openstack-utils openstack-db has insecure password creation6.1CVE-2013-1815redhatopenstack_essex+3
EPSS score
0.45%
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.2.1CVE-2012-6120debianpuppet+2
EPSS score
0.39%
Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.