CVE-2013-0266
Openstack Essex - Race Condition
Title source: ruleDescription
manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.
Scores
EPSS
0.0008
EPSS Percentile
24.1%
Classification
CWE
CWE-362
Status
draft
Affected Products (2)
openstack/essex
openstack/folsom
Timeline
Published
Mar 08, 2013
Tracked Since
Feb 18, 2026