CVE-2013-2030

CVE-2013-2030 describes an insecure temporary directory vulnerability in keystone/middleware/auth_token.py affecting OpenStack Nova Folsom, Grizzly, and Havana. A local attacker can exploit this by pre-creating the temporary directory used for signing certificates, such as /tmp/keystone-signing-nova, to spoof servers. The vulnerability has a CVSS v2 score of 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N), indicating low severity with local access, low attack complexity, no authentication required, and a potential impact of partial integrity compromise. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.