Redhat Packstack vulnerabilities

2 vulnerabilities

Known vulnerabilities in Redhat Packstack, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2013-1815redhatopenstack_essex+3
EPSS score
0.45%
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.5CVE-2014-3703redhatpackstack+3
EPSS score
2.16%
OpenStack PackStack 2012.2.1, when the Open vSwitch (OVS) monolithic plug-in is not used, does not properly set the libvirt_vif_driver configuration option when generating the nova.conf configuration, which causes the firewall to be disabled and allows remote attackers to bypass intended access restrictions.