CVE-2012-4574mediumCWE-538

CVE-2012-4574: falha de média gravidade em Red Hat CloudForms for RHEL 6

Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CloudForms+ Monitorar CloudForms Tools

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.4%
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Red Hat · CloudForms for RHEL 6Red Hat · CloudForms Tools for RHEL 5Red Hat · RHUI for RHEL 6
CVEs relacionadas — Red Hat CloudForms for RHEL 6

No mesmo produto, das mais perigosas para as menos.

CVE-2012-5605LOWGrinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissionsEPSS 0.3%