CVE-2013-1815
CVE-2013-1815 is a medium-severity vulnerability in Redhat Openstack Essex with a CVSS 3.x base score of 6.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-379.
Key facts
- Severity: Medium (CVSS 3.x base score 6.1)
- CVSS v2: 4.4
- EPSS exploit prediction: 0% (36th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-379
- Affected product: Redhat Openstack Essex
- Published:
- Last modified:
Description
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
Frequently asked questions
- What is CVE-2013-1815?
- A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
- How severe is CVE-2013-1815?
- CVE-2013-1815 has a CVSS 3.x base score of 6.1, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability low.
- Is CVE-2013-1815 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2013-1815?
- CVE-2013-1815 primarily affects Redhat Openstack Essex. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2013-1815?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2013-1815 published?
- CVE-2013-1815 was published on 2013-04-10 and last updated on 2026-06-16.
References
- http://rhn.redhat.com/errata/RHSA-2013-0671.html
- https://access.redhat.com/security/cve/CVE-2013-1815
- https://bugzilla.redhat.com/show_bug.cgi?id=917904
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83017
Affected products (3)
- cpe:2.3:a:redhat:openstack_essex:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack_folsom:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:packstack:2012.2.3:*:*:*:*:*:*:*
More vulnerabilities in Redhat Openstack Essex
- CVE-2013-1793 — High (CVSS 7.5): openstack-utils openstack-db has insecure password creation
- CVE-2012-6120 — Low (CVSS 2.1): Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows…
All CVEs affecting Redhat Openstack Essex →
Other CWE-379 vulnerabilities
- CVE-2024-9950 — High (CVSS 7.8): A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify…
- CVE-2024-9500 — High (CVSS 7.8): A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
- CVE-2023-6080 — High (CVSS 7.8): Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation…
- CVE-2023-3181 — High (CVSS 7.8): The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at…
- CVE-2023-37243 — High (CVSS 7.8): The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM…
- CVE-2023-26396 — High (CVSS 7.8): Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of…