PYSEC-2013-45

keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which…

Not rated yet Withdrawn Nov 22, 2024 PyPI

Severity: Not rated yet; No source has published a CVSS score yet
Exploit chance (EPSS): —; No score published
Known exploited: No; Not in CISA's catalog
Weakness: —; Not classified
Fix: None yet; No fixed version published

Description

keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.

Affected versions

PyPI

Package	Vulnerable	Fixed in
nova	`all versions`	No fix yet

How to fix

No fixed version has been published yet. Until one is, remove or replace the package, or turn off or isolate the affected feature. This page updates when a fix ships.

References

Advisories

lists.openstack.org/pipermail/openstack-announce/2013-May/000098.html

Issue reports

bugzilla.redhat.com/show_bug.cgi

Timeline

Dec 27, 2013 Published
Nov 22, 2024 Withdrawn
Oct 9, 2025 Last updated by the source

Advisory	Severity	Why it's related
GHSA-mfg3-p6m3-gjgr OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints	High	Also affects nova
GHSA-m4f3-qp2w-gwh6 OpenStack Nova calls qemu-img without format restrictions for resize	High	Also affects nova
GHSA-rm86-h44c-2r2m OpenStack Nova vulnerable to unauthorized access to potentially sensitive data	Medium	Also affects nova
GHSA-r4v4-w9pv-6fph OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access	Medium	Also affects nova
GHSA-7h75-hwxx-qpgc OpenStack Cinder, glance, and Nova vulnerable to Path Traversal	Medium	Also affects nova
GHSA-v725-c588-h936 OpenStack Nova Changing vnic_type breaks compute service restart	Low	Also affects nova
GHSA-22jm-4hxw-35jf OpenStack Nova can leak consoleauth token into log files	Low	Also affects nova
GHSA-43cm-73px-5v4m OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors	Low	Also affects nova

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor