CVE-2012-5605 Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions
LowCVSS 3.3
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the /var/lib/pulp/cache/grinder/ directory. This could lead to unauthorized data tampering within the application's cache.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudforms systemengine 1 | < 0:0.7.8.1-1.el6cf | 0:0.7.8.1-1.el6cf |
| cloudforms tools 1 | < 0:0.7.8.1-1.el6cf | 0:0.7.8.1-1.el6cf |
| cloudforms systemengine 1 | < 0:0.66.1-2.el6cf | 0:0.66.1-2.el6cf |
| cloudforms tools 1 | < 0:0.66.1-2.el6cf | 0:0.66.1-2.el6cf |
| cloudforms systemengine 1 | < 0:0.0.150-1.el6cf | 0:0.0.150-1.el6cf |
| cloudforms tools 1 | < 0:0.0.150-1.el6cf | 0:0.0.150-1.el6cf |
| cloudforms systemengine 1 | < 0:1.1.12-22.el6cf | 0:1.1.12-22.el6cf |
| cloudforms tools 1 | < 0:1.1.12-22.el6cf | 0:1.1.12-22.el6cf |
| cloudforms systemengine 1 | < 0:1.1.2-1.el6cf | 0:1.1.2-1.el6cf |
| cloudforms tools 1 | < 0:1.1.2-1.el6cf | 0:1.1.2-1.el6cf |
| cloudforms systemengine 1 | < 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
| cloudforms tools 1 | < 0:1.1.8-1.el6cf | 0:1.1.8-1.el6cf |
| cloudforms systemengine 1 | < 0:1.1.8-12.el6cf | 0:1.1.8-12.el6cf |
| cloudforms tools 1 | < 0:1.1.8-12.el6cf | 0:1.1.8-12.el6cf |
| cloudforms systemengine 1 | < 0:1.1.5-2.el6cf | 0:1.1.5-2.el6cf |
| cloudforms tools 1 | < 0:1.1.5-2.el6cf | 0:1.1.5-2.el6cf |
| cloudforms systemengine 1 | < 0:1.1.9-12.el6cf | 0:1.1.9-12.el6cf |
| cloudforms tools 1 | < 0:1.1.9-12.el6cf | 0:1.1.9-12.el6cf |
| cloudforms systemengine 1 | < 0:1.1.1-2.el6cf | 0:1.1.1-2.el6cf |
| cloudforms tools 1 | < 0:1.1.1-2.el6cf | 0:1.1.1-2.el6cf |
| cloudforms systemengine 1 | < 0:1.1.14-1.el6cf | 0:1.1.14-1.el6cf |
| cloudforms tools 1 | < 0:1.1.14-1.el6cf | 0:1.1.14-1.el6cf |
| cloudforms systemengine 1 | < 0:2.1.5-4.el6cf | 0:2.1.5-4.el6cf |
| cloudforms tools 1 | < 0:2.1.5-4.el6cf | 0:2.1.5-4.el6cf |
| cloudforms systemengine 1 | < 0:0.0.11-3.el6cf | 0:0.0.11-3.el6cf |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cloudforms tools 1 | < 0:0.0.11-3.el6cf | 0:0.0.11-3.el6cf |
| cloudforms systemengine 1 | < 0:0.66.1-2.el5 | 0:0.66.1-2.el5 |
| cloudforms tools 1 | < 0:0.66.1-2.el5 | 0:0.66.1-2.el5 |
| cloudforms systemengine 1 | < 0:1.1.2-1.el5 | 0:1.1.2-1.el5 |
| cloudforms tools 1 | < 0:1.1.2-1.el5 | 0:1.1.2-1.el5 |
| redhat cloudforms | <= 1.0 | No fix listed |
References
- 88141 vdb-entry
- RHSA-2012:1543 vendor-advisory
- 51472 third-party-advisory vendor-advisory
- 56819 vdb-entry
- RHSA-2012:1543 vendor-advisory
- access.redhat.com vdb-entry
- bugzilla.redhat.com
- bugzilla.redhat.com
- cloudforms-grinder-insecure-permissions(80550) vdb-entry