CVE-2013-7048
openstack nova: no CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in nova 12.0.0a0.
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openstack:nova
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-grp5-h379-j75x | PyPI | nova | <12.0.0a0 | 12.0.0a0 |
| PYSEC-2026-873 | PyPI | nova | <12.0.0a0 | 12.0.0a0 |