description: The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret key value.
problem types: Dashboard /etc/openstack-dashboard/local_settings secret key exposure
affected:
{
product: python-django-horizon
vendor: python-django-horizon
versions:
status: affected, version: before 2012.1.1
}