CVE-2013-1815 Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation
Local attackers can modify deployed systems by exploiting insecure answer file creation in temporary directories, leading to unauthorized changes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-1815?
CVE-2013-1815 is a medium-severity path traversal vulnerability in Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse), published on 10 Apr 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
Which versions are affected by CVE-2013-1815?
It affects 3 products.
Linux distribution packages (1)
openstack-packstack Red Hat:openstack:2::el6 | All versions | 0:2012.2.3-0.1.dev454.el6ost |
Products include Redhat Openstack Essex, Redhat Openstack Folsom, Redhat Packstack.
How do I fix CVE-2013-1815?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2013-1815 being exploited?
There is no known exploitation of CVE-2013-1815 in the wild and no public exploit code.
Other vulnerabilities in Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
Sources
Also known as GHSA-fp87-8q28-x5v6, RHSA-2013:0671.