CVE-2012-6120 Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.
LowCVSS 2.1
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/puppet(Debian:11) | < 2.6.4-2 | 2.6.4-2 |
| redhat openstack essex | All versions | No fix listed |
| redhat openstack folsom | All versions | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- RHSA-2013:0710 vendor-advisory