Vulnerability Details CVE-2012-5483
tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.8%
CVSS Severity
CVSS v2 Score 2.1
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
- http://rhn.redhat.com/errata/RHSA-2012-1556.html
- http://www.securityfocus.com/bid/56888
- https://bugzilla.redhat.com/show_bug.cgi?id=873447
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80612
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
- http://rhn.redhat.com/errata/RHSA-2012-1556.html
- http://www.securityfocus.com/bid/56888
- https://bugzilla.redhat.com/show_bug.cgi?id=873447
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80612