CVE-2013-1815Medium· 6.1▾ SunlitA flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file crea…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
openstack-packstack (all versions)openstack-packstack (all versions)openstack-packstack (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2013-0261High· 8.8Packstack: packstack: arbitrary file overwrite via symlink attack
CVE-2013-0266Medium· 5.5Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files.
CVE-2026-25645Medium· 4.7requests: Requests: Security bypass due to predictable temporary file creation (CVE-2026-25645)
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
CVE-2026-97174Medium· 6.8Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens
CVE-2026-107123High· 7.5Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing