CVE-2013-1977: Openstack Devstack

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.

Affected products

• Openstack Devstack: affected versions not specified

Published 2013-05-21. Last modified 2026-06-16.