CVE-2013-7048

Severity: low (CVSS 3.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-01-23 · updated 2026-06-17
Weakness: CWE-264

Description

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.

Affected products

OpenStack Nova: from 2013.1 through 2013.1.4; from 2013.2 through 2013.2.1

References

http://rhn.redhat.com/errata/RHSA-2014-0231.html
http://www.openwall.com/lists/oss-security/2014/01/13/2
https://bugs.launchpad.net/nova/+bug/1227027
http://rhn.redhat.com/errata/RHSA-2014-0231.html
http://www.openwall.com/lists/oss-security/2014/01/13/2
https://bugs.launchpad.net/nova/+bug/1227027

Get alerted when CVE-2013-7048 or the next vulnerability affects your stack