Vulnerabilities > Openstack > Devstack

DATE CVE VULNERABILITY TITLE RISK
2013-05-21 CVE-2013-1977 Permissions, Privileges, and Access Controls vulnerability in Openstack Devstack
OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.
local
low complexity
openstack CWE-264
2.1