CVE-2012-5476: Infoleak
Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2012-5476?
CVE-2012-5476 is a vulnerability in the OpenStack dashboard package that exposes the admin password and token value.
How severe is CVE-2012-5476?
CVE-2012-5476 has a severity rating of 5.5 (medium).
What software is affected by CVE-2012-5476?
OpenStack Horizon 2012.2, Debian Debian Linux 8.0, Debian Debian Linux 9.0, and Debian Debian Linux 10.0 are affected by CVE-2012-5476.
How do I fix CVE-2012-5476?
To fix CVE-2012-5476, update the horizon package to version 3:14.0.2-3+deb10u2 or higher.
Where can I find more information about CVE-2012-5476?
You can find more information about CVE-2012-5476 at the following references: [Red Hat Security Advisory](https://access.redhat.com/security/cve/cve-2012-5476), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5476), [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2012-5476).