Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2012-5605

Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions

A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Systemengine Cloudforms Tools Redhat
Products
1 1 Cloudforms
CVE-2012-4574

Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file

A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Cloudforms Systemengine Cloudforms Tools Redhat
Products
1 1 Cloudforms and 1 more
CVE-2012-3538

katello: pulp admin password logged in plaintext in world-readable katello/production.log

Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Cloudforms Tools Redhat
Products
1 Cloudforms
CVE-2012-5603

Katello: lack of authorization in proxies_controller.rb

proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system.

CVSS 2.0 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Cloudforms Tools Redhat Rhel Sam
Products
1 Cloudforms 1.2