CVE-2013-1815
Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation
CVE-2013-1815 is a medium vulnerability (CVSS 6.1) in Redhat Packstack, published April 10, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in openstack-packstack 0:2012.2.3-0.1.dev454.el6ost.
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
- Record
CVE-2013-1815- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-379
- Updated
- 2026-11-02
EUVDEUVD-2013-1834
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
- Record
EUVD-2013-1834- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fp87-8q28-x5v6
PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure...
PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed systems by changing this file.
- Record
GHSA-fp87-8q28-x5v6- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L - Weakness
- CWE-379
- Updated
- 2026-11-02
NVD
A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to unauthorized system modifications.
- Record
CVE-2013-1815- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L - CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-379, CWE-255
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-packstackRed Hat:openstack:2::el6 |
before 0:2012.2.3-0.1.dev454.el6ost | 0:2012.2.3-0.1.dev454.el6ost |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | created | CVE List, EUVD, GitHub Advisories, NVD, OSV |
References
rhn.redhat.com/errata/RHSA-2013-0671.html
access.redhat.com/errata/RHSA-2013:0671
bugzilla.redhat.com/show_bug.cgi?id=917904
exchange.xforce.ibmcloud.com/vulnerabilities/83017
nvd.nist.gov/vuln/detail/CVE-2013-1815
Show 31 moreShow less
github.com/advisories/GHSA-fp87-8q28-x5v6
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0671.json
cve.org/CVERecord?id=CVE-2013-1815