Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:26:56 +0000 BREW-ansible-CVE-2013-2030 — OpenStack Nova uses insecure keystone middleware tmpdir by default https://cve.radiocsirt.org/vuln/brew-ansible-cve-2013-2030 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2013-2030 CVE-2013-2030 https://cve.radiocsirt.org/vuln/cve-2013-2030 <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> https://cve.radiocsirt.org/vuln/cve-2013-2030 GHSA-pxxv-rv32-2qgv — OpenStack Nova uses insecure keystone middleware tmpdir by default https://cve.radiocsirt.org/vuln/ghsa-pxxv-rv32-2qgv <p><strong>Affected:</strong> PyPI: python-keystoneclient</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> <p><strong>Affected:</strong> PyPI: python-keystoneclient</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> https://cve.radiocsirt.org/vuln/ghsa-pxxv-rv32-2qgv