CVE-2012-5474: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 18 only
• Openstack Horizon: from 2012.1, before 2012.1.1 (fixed in 2012.1.1)
• Red Hat Openstack: version 2.0 only

Published 2019-12-30. Last modified 2026-06-16.