CVE-2012-4574
Description
Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.
Risk Information
Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.082
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2012:1543) Important: CloudForms System Engine 1.1 update gofer-0.66.1-2.el5.noarch.rpm | Linux |
| (RHSA-2012:1543) Important: CloudForms System Engine 1.1 update gofer-package-0.66.1-2.el5.noarch.rpm | Linux |
| (RHSA-2012:1543) Important: CloudForms System Engine 1.1 update gofer-watchdog-0.66.1-2.el5.noarch.rpm | Linux |
| (RHSA-2012:1543) Important: CloudForms System Engine 1.1 update katello-agent-1.1.2-1.el5.noarch.rpm | Linux |
| (RHSA-2012:1543) Important: CloudForms System Engine 1.1 update python-gofer-0.66.1-2.el5.noarch.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234