OpenStack Compute (Nova) CVE-2013-7048 Insecure Directory Permissions Vulnerability
BID:64266
Info
OpenStack Compute (Nova) CVE-2013-7048 Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 64266 |
| Class: | Design Error |
| CVE: |
CVE-2013-7048 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 18 2013 12:00AM |
| Updated: | Apr 13 2015 10:04PM |
| Credit: | Daniel Berrange |
| Vulnerable: |
Redhat OpenStack 4.0 Redhat OpenStack 3.0 OpenStack OpenStack Compute (Nova) Havana OpenStack OpenStack Compute (Nova) Grizzly IBM SmartCloud Provisioning 2.3.0 Hex-Ray IDA Pro 6.5 |
| Not Vulnerable: |
IBM SmartCloud Provisioning 2.4 |
Discussion
OpenStack Compute (Nova) CVE-2013-7048 Insecure Directory Permissions Vulnerability
OpenStack Compute (Nova) is prone to a security vulnerability because it sets insecure directory permissions.
An attacker can exploit this issue to modify, create, or delete files contained in the affected directory.
OpenStack Compute (Nova) Havana and Grizzly are affected.
OpenStack Compute (Nova) is prone to a security vulnerability because it sets insecure directory permissions.
An attacker can exploit this issue to modify, create, or delete files contained in the affected directory.
OpenStack Compute (Nova) Havana and Grizzly are affected.
Exploit / POC
OpenStack Compute (Nova) CVE-2013-7048 Insecure Directory Permissions Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.