CVE-2013-1815 MEDIUM

CVE-2013-1815: Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation

Vendor Red Hat
Product Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
Weakness CWE-379
Published April 10, 2013
Last update April 30, 2026
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

What the vulnerability does

01Description

A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.

Key dates

02Disclosure timeline

April 10, 2013 CVE published
April 30, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-6080 Privilege Escalation to SYSTEM in Lakeside Software Installer CVE-2025-21162 Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379) CVE-2021-39828 Adobe Digital Editions Installer flaw leads to Local Privilege Escalation CVE-2022-23163 CVE-2016-9486 On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are created in a folder with incorrect privileges