CVE-2012-5483: Openstack Keystone

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.

Affected products

• Openstack Keystone: version 2012.1.3 only

Published 2012-12-26. Last modified 2026-06-16.