Redhat Openstack Folsom vulnerabilities

2 vulnerabilities

Known vulnerabilities in Redhat Openstack Folsom, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2013-1815redhatopenstack_essex+3
EPSS score
0.45%
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.2.1CVE-2012-6120debianpuppet+2
EPSS score
0.39%
Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.