Lucene search
HistoryJan 23, 2014 - 9:55 p.m.
CVE-2013-7048
openstack
compute
nova
grizzly
havana
vulnerability
temporary directory
permissions
snapshots
cve-2013-7048
nvd.
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Affected configurations
Node
openstacknovaRange2013.1–2013.1.4
ORopenstacknovaRange2013.2–2013.2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| openstack:nova | openstack nova | le | 2013.1.4 |
| openstack:nova | openstack nova | le | 2013.2.1 |
Related
nessus
nessus
Fedora 20 : openstack-nova-2013.2.2-1.fc20 (2014-2554)
2014-02-26 00:00:00
Fedora 19 : openstack-nova-2013.1.5-1.fc19 (2014-4188)
2014-04-03 00:00:00
cvelist
cvelist
CVE-2013-7048
2014-01-23 21:00:00
ubuntucve
ubuntucve
CVE-2013-7048
2014-01-23 00:00:00
debiancve
debiancve
CVE-2013-7048
2014-01-23 21:55:04
prion
prion
Design/Logic Flaw
2014-01-23 21:55:00
ibm
ibm
github
github
OpenStack Nova live snapshots use an insecure local directory
2022-05-14 01:58:45
nvd
nvd
CVE-2013-7048
2014-01-23 21:55:04
seebug
seebug
OpenStack Compute (Nova) 不安全目录权限漏洞
2013-12-13 00:00:00
redhat
redhat
(RHSA-2014:0366) Moderate: openstack-nova security and bug fix update
2014-04-03 00:00:00
(RHSA-2014:0231) Moderate: openstack-nova security and bug fix update
2014-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-nova-2013.2.2-1.fc20
2014-02-25 07:53:02
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.5-1.fc19
2014-04-02 09:14:29
openvas
openvas
Fedora Update for openstack-nova FEDORA-2014-2554
2014-02-25 00:00:00
Fedora Update for openstack-nova FEDORA-2014-2554
2014-02-25 00:00:00
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:57:31
Privilege Escalation
2019-05-02 04:57:32
Infomation Disclosure
2019-05-02 04:57:32
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-7048