CVE-2013-1815: redhat openstack_essex
Vulnerability summary
CVE-2013-1815 is a medium (CVSS 6.1) vulnerability in redhat openstack_essex. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.8% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 10-04-2013PublishedVulnerability first disclosed.
- 30-04-2026Last modifiedVulnerability information updated.
Description
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-379Creation of Temporary File in Directory with Insecure PermissionsThe product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
- CWE-255Credentials Management ErrorsWeaknesses in this category are related to the management of credentials.
Affected systems
Redhat4 products
- openstack_essexna
- openstack_folsomna
- packstack2012.2.3
- openstack-packstack< 0:2012.2.3-0.1.dev454.el6ost
1 vendor · 4 products
References
36 links- rhn.redhat.com/errata/RHSA-2013-0671.htmlVendor Advisory
