keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-12-27T01:00:00
Updated: 2014-04-26T23:57:01
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-2030
JSON object: View
NVD Information
Status : Modified
Published: 2013-12-27T01:55:05.237
Modified: 2014-05-05T05:21:30.570
Link: CVE-2013-2030
JSON object: View
Redhat Information
No data.
CWE