https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:32:54.945998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-0266 CVE-2013-0266 — Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative password… 2026-10-05T05:32:54.967827+00:00

Affected: Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse), Red Hat OpenStack Platform 4

A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. This vulnerability is due to incorrect file permissions, specifically world-readable permissions, on the `cinder.conf` and `api-paste.ini` configuration files. A local user can exploit this by reading these files, which leads to the disclosure of OpenStack administrative passwords. This information disclosure could allow unauthorized access to sensitive OpenStack resources.