OpenStack Nova live snapshots use an insecure local directory
Date: 2022-05
Affected: pip/nova
Attack vector: other
Category: vulnerability-disclosure
Severity: Low
CVE: CVE-2013-7048

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.


Mitigations:

Architectural layers (MAESTRO):