OpenStack Cinder Puppet Module. Mirror of code maintained at opendev.org.

CVE History

CVEPublishedCVSS v2CVSS v3
CVE-2013-0266N/A2.1 LOW
manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.