CVEs published May 21, 2013
7 CVEs were published on May 21, 2013: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- keystone
- 2
Medium, low and unrated 7
- CVE-2007-6746telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the
- CVE-2012-6137rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when
- CVE-2013-1964Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administr
- CVE-2013-1977OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the L
- CVE-2013-2006OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintkeystone
- CVE-2013-2007The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which
- CVE-2013-2059OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authenticatiokeystone