Unscored severity · published Dec 26, 2012
CVE-2012-5483
tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for…
–
CVSS
0.3%
EPSS
No
On KEV
Description
tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configured, uses world-readable permissions for /etc/keystone/ec2rc, which allows local users to obtain access to EC2 services by reading administrative access and secret values from this file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Keystone · Openstack
2012.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5483
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5483
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-December/094286.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2012-1556.html
www.securityfocus.com
http://www.securityfocus.com/bid/56888
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=873447
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/80612
More from Keystone
8.8
CVE-2026-43000
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42998
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2026-42999
An issue was discovered in OpenStack Keystone before 29.0.2
8.8
CVE-2020-12691
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0
8.8
CVE-2020-12690
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0