CVE-2013-1815
Medium
Description
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Redhat Packstack
PublishedApr 10, 2013
First seenApr 10, 2013
Weakness typeCWE-379CWE-379
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat packstack | 2012.2.3 | — |
| redhat openstack_essex | No range specified | — |
| redhat openstack_folsom | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.