2013.1

DATE	CVE	VULNERABILITY TITLE	RISK
2013-12-27	CVE-2013-2030	Permissions, Privileges, and Access Controls vulnerability in Openstack products keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora. local low complexity openstack CWE-264	2.1