OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.
Max CVSS
2.1
EPSS Score
0.04%
Published
2013-05-21
Updated
2013-05-22
1 vulnerabilities found