LWN.net Logo

openstack-keystone: file permissions flaw

Package(s):openstack-keystone CVE #(s):CVE-2012-5483
Created:December 11, 2012 Updated:December 12, 2012
Description: From the Red Hat advisory:

When access to Amazon Elastic Compute Cloud (Amazon EC2) was configured, a file permissions flaw in Keystone allowed a local attacker to view the administrative access and secret values used for authenticating requests to Amazon EC2 services. An attacker could use this flaw to access Amazon EC2 and enable, disable, and modify services and settings.

Alerts:
Red Hat RHSA-2012:1556-01 2012-12-10
Fedora FEDORA-2012-19341 2012-12-11

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds