CVE-2012-4574 Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file
MediumCVSS 5.5
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the pulp.conf configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudforms systemengine 1 | < 0:0.7.8.1-1.el6cf | 0:0.7.8.1-1.el6cf |
| cloudforms tools 1 | < 0:0.7.8.1-1.el6cf | 0:0.7.8.1-1.el6cf |
| cloudforms systemengine 1 | < 0:0.66.1-2.el6cf | 0:0.66.1-2.el6cf |
| cloudforms tools 1 | < 0:0.66.1-2.el6cf | 0:0.66.1-2.el6cf |
| cloudforms systemengine 1 | < 0:0.0.150-1.el6cf | 0:0.0.150-1.el6cf |
| cloudforms tools 1 | < 0:0.0.150-1.el6cf | 0:0.0.150-1.el6cf |
| cloudforms systemengine 1 | < 0:1.1.12-22.el6cf | 0:1.1.12-22.el6cf |
| cloudforms tools 1 | < 0:1.1.12-22.el6cf | 0:1.1.12-22.el6cf |
| cloudforms systemengine 1 | < 0:1.1.2-1.el6cf | 0:1.1.2-1.el6cf |
| cloudforms tools 1 | < 0:1.1.2-1.el6cf | 0:1.1.2-1.el6cf |
| cloudforms systemengine 1 | < 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
| cloudforms tools 1 | < 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
| cloudforms systemengine 1 | < 0:1.1.8-12.el6cf | 0:1.1.8-12.el6cf |
| cloudforms tools 1 | < 0:1.1.8-12.el6cf | 0:1.1.8-12.el6cf |
| cloudforms systemengine 1 | < 0:1.1.5-2.el6cf | 0:1.1.5-2.el6cf |
| cloudforms tools 1 | < 0:1.1.5-2.el6cf | 0:1.1.5-2.el6cf |
| cloudforms systemengine 1 | < 0:1.1.9-12.el6cf | 0:1.1.9-12.el6cf |
| cloudforms tools 1 | < 0:1.1.9-12.el6cf | 0:1.1.9-12.el6cf |
| cloudforms systemengine 1 | < 0:1.1.1-2.el6cf | 0:1.1.1-2.el6cf |
| cloudforms tools 1 | < 0:1.1.1-2.el6cf | 0:1.1.1-2.el6cf |
| cloudforms systemengine 1 | < 0:1.1.14-1.el6cf | 0:1.1.14-1.el6cf |
| cloudforms tools 1 | < 0:1.1.14-1.el6cf | 0:1.1.14-1.el6cf |
| cloudforms systemengine 1 | < 0:2.1.5-4.el6cf | 0:2.1.5-4.el6cf |
| cloudforms tools 1 | < 0:2.1.5-4.el6cf | 0:2.1.5-4.el6cf |
| cloudforms systemengine 1 | < 0:0.0.11-3.el6cf | 0:0.0.11-3.el6cf |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudforms tools 1 | < 0:0.0.11-3.el6cf | 0:0.0.11-3.el6cf |
| cloudforms systemengine 1 | < 0:0.66.1-2.el5 | 0:0.66.1-2.el5 |
| cloudforms tools 1 | < 0:0.66.1-2.el5 | 0:0.66.1-2.el5 |
| cloudforms systemengine 1 | < 0:1.1.2-1.el5 | 0:1.1.2-1.el5 |
| cloudforms tools 1 | < 0:1.1.2-1.el5 | 0:1.1.2-1.el5 |
| redhat rhui | = 2 | No fix listed |
| redhat cloudforms | <= 1.0 | No fix listed |
References
- 88138 vdb-entry
- RHSA-2012:1543 vendor-advisory
- 51472 third-party-advisory vendor-advisory
- 56819 vdb-entry
- RHBA-2013:0571 vendor-advisory
- RHSA-2012:1543 vendor-advisory
- access.redhat.com vdb-entry
- bugzilla.redhat.com
- cloudforms-pulpconf-info-disc(80548) vdb-entry