Red Hat Openstack Folsom vulnerabilities

2 CVEs affecting Red Hat Openstack Folsom, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1815, published 2013-04-10.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-1815, published 2013-04-10. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current…
• CVE-2012-6120, published 2013-04-10. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.