openstack/puppet-cinder on GitHub
OpenStack Cinder Puppet Module. Mirror of code maintained at opendev.org.
CVE History
CVE | Published | CVSS v2 | CVSS v3 |
---|---|---|---|
CVE-2013-0266 | N/A | 2.1 LOW | |
manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files. |