CVE-2012-5483

Advisory

tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://bugzilla.redhat.com/show_bug.cgi?id=873447
• http://rhn.redhat.com/errata/RHSA-2012-1556.html
• http://www.securityfocus.com/bid/56888
• http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80612
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5483