CVE-2013-0266Medium· 5.5▾ SunlitA flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the `cinder.conf` and `api-paste.ini` configuration files. A l…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A flaw was found in the puppetlabs-cinder module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the cinder.conf and api-paste.ini configuration files. A local user can exploit this by reading these files, which leads to the disclosure of OpenStack administrative passwords. This information disclosure could allow unauthorized access to sensitive OpenStack resources.
openstack-packstack (all versions)openstack-packstack (all versions)openstack-packstack (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2013-0261High· 8.8Packstack: packstack: arbitrary file overwrite via symlink attack
CVE-2025-58713Medium· 6.4Rhpam: privilege escalation via excessive /etc/passwd permissions
CVE-2012-5605Low· 3.3Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions
CVE-2013-1815Medium· 6.1Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation
CVE-2012-3427Medium· 5.5Jboss-eap: aws-ec2: jboss eap and aws ec2: information disclosure via incorrect directory permissions
CVE-2025-57848Medium· 6.4A container privilege escalation flaw was found in certain Container-native Virtualization images