https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:34:32.289988+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-308109 EUVD-2026-308109 2026-10-03T08:34:32.380508+00:00 EUVD-2026-308109 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0266 fkie_cve-2013-0266 2026-10-03T08:34:32.380544+00:00

A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the `cinder.conf` and `api-paste.ini` configuration files. A local user can exploit this by reading these files, which leads to the disclosure of OpenStack administrative passwords. This information disclosure could allow unauthorized access to sensitive OpenStack resources.

 https://cve.radiocsirt.org/vuln/ghsa-j8cr-2gxr-hvvj GHSA-j8cr-2gxr-hvvj 2026-10-03T08:34:32.380578+00:00

manifests/base.pp in the puppetlabs-cinder module, as used in PackStack, uses world-readable permissions for the (1) cinder.conf and (2) api-paste.ini configuration files, which allows local users to read OpenStack administrative passwords by reading the files.

 https://cve.radiocsirt.org/vuln/gsd-2013-0266 gsd-2013-0266 2026-10-03T08:34:32.380596+00:00 gsd-2013-0266 https://cve.radiocsirt.org/vuln/rhsa-2013:0595 RHSA-2013:0595 — Red Hat Security Advisory: openstack-packstack security and bug fix update 2026-10-03T08:34:32.380608+00:00

packstack: insecure use of /tmp in manifest creation packstack: puppetlabs-cinder / manifests / base.pp weak file permissions