VDB
CVE-2012-5483
CVE-2012-5483
PUBLISHED
Reported by redhat · Published December 26, 2012
tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Dec 26, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 17, 2022 CVE Updated
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
References
- 56888 vdb-entryx_refsource_BID
- RHSA-2012:1556 vendor-advisoryx_refsource_REDHAT
- x_refsource_MISC
- keystone-secret-key-info-disc(80612) vdb-entryx_refsource_XF
- FEDORA-2012-19341 vendor-advisoryx_refsource_FEDORA