CVE-2013-7048
OpenStack Nova live snapshots use an insecure local directory
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
Exploit likelihood
What each source reports
NVD Score used
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
CVE-2013-7048- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
CVE-2013-7048- Updated
- 2026-11-02
EUVDEUVD-2022-4003 No score
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
EUVD-2022-4003- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grp5-h379-j75x No score
OpenStack Nova live snapshots use an insecure local directory
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
GHSA-grp5-h379-j75x- Updated
- 2026-11-02
OSV No score
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
CVE-2013-7048- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7048 No score
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
DEBIAN-CVE-2013-7048- Updated
- 2026-11-02
OSVGHSA-grp5-h379-j75x No score
OpenStack Nova live snapshots use an insecure local directory
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
GHSA-grp5-h379-j75x- Updated
- 2026-11-02
OSVPYSEC-2026-873 No score
OpenStack Nova live snapshots use an insecure local directory
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- Record
PYSEC-2026-873- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
novaPyPI |
before 12.0.0a0 | 12.0.0a0 |
novaDebian:12 |
before 2013.2.2 | 2013.2.2 |
novaDebian:13 |
before 2013.2.2 | 2013.2.2 |
novaDebian:14 |
before 2013.2.2 | 2013.2.2 |
openstack-novaRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-apiRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-cellsRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-certRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-commonRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-computeRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openstack-nova-conductorRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-consoleRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-docRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-networkRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-novncproxyRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-objectstoreRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-nova-schedulerRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
python-novaRed Hat:openstack:4::el6 From an advisory covering 4 CVEs |
before 0:2013.2.2-2.el6ost | 0:2013.2.2-2.el6ost |
openstack-novaRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-apiRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-cellsRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-certRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-commonRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-computeRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-conductorRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-consoleRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-docRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-networkRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-objectstoreRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
openstack-nova-schedulerRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
python-novaRed Hat:openstack:3::el6 From an advisory covering 3 CVEs |
before 0:2013.1.5-2.el6ost | 0:2013.1.5-2.el6ost |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7048 is a low vulnerability (CVSS 3.3) in Openstack Nova, published January 23, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in nova 12.0.0a0.
References
bugs.launchpad.net/nova/+bug/1227027
rhn.redhat.com/errata/RHSA-2014-0231.html
openwall.com/lists/oss-security/2014/01/13/2
nvd.nist.gov/vuln/detail/CVE-2013-7048
github.com/openstack/nova/commit/75be5abd6b3fa0f7f27fe9c805f832cd41d44a5d
Show 39 moreShow less
security-tracker.debian.org/tracker/CVE-2013-7048
pypi.org/project/nova
access.redhat.com/errata/RHSA-2014:0231
bugzilla.redhat.com/show_bug.cgi?id=1020979
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0231.json
cve.org/CVERecord?id=CVE-2013-6419
launchpad.net/bugs/1073306