CVE-2012-5605lowCWE-276

CVE-2012-5605: falha de baixa gravidade em Red Hat CloudForms for RHEL 6

Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CloudForms+ Monitorar CloudForms Tools

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.3%
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Red Hat · CloudForms for RHEL 6Red Hat · CloudForms Tools for RHEL 5
CVEs relacionadas — Red Hat CloudForms for RHEL 6

No mesmo produto, das mais perigosas para as menos.

CVE-2012-4574MEDIUMPulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration fileEPSS 0.4%