build_ssl_config_file sets permissions on wrong file
Bug #1206254 reported by
John Dennis
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Medium
|
John Dennis | ||
OpenStack Security Advisory |
Invalid
|
Undecided
|
Unassigned |
Bug Description
BaseCertificate
Both the index and serial file have their permissions set like this:
self._set_
This looks like a cut-n-paste bug because instead of self.ssl_
Changed in keystone: | |
assignee: | nobody → Adam Young (ayoung) |
Changed in ossa: | |
status: | Incomplete → Invalid |
information type: | Private Security → Public |
Changed in keystone: | |
status: | New → Confirmed |
milestone: | none → havana-3 |
Changed in keystone: | |
importance: | Undecided → Medium |
Changed in keystone: | |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | havana-3 → 2013.2 |
To post a comment you must log in.
Any input on what the security impact of this issue could be? Does it represent an exploitable vulnerability, and if so under what circumstances and to what effect?