Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:grizzly:2013.1:*:*:*:*:*:*:*

part: a version: 2013.1 update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductGrizzly (45bd94e9-3932-5469-89a4-8778f134f485)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jtopjian/grizzly-docker purl2cpe 2026-06-01 10:17:03.436521
pkg:github/puppetlabs/puppetlabs-grizzly purl2cpe 2026-06-01 10:17:03.436523

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2030 vulnerable 2026-06-03 14:32:53.275808 Details available
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.
Published: 2013-12-27T01:00:00.000Z
Updated: 2024-08-06T15:20:37.504Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.