Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openstack_essex | Redhat | - (including) | - (including) |
| Openstack_folsom | Redhat | - (including) | - (including) |
| OpenStack Folsom for RHEL 6 | RedHat | puppet-0:2.6.18-1.el6ost | * |
| Puppet | Ubuntu | hardy | * |
| Puppet | Ubuntu | lucid | * |
| Puppet | Ubuntu | upstream | * |