cloudforms tools vulnerabilities

Products

• 1 2

Latest cloudforms tools CVEs

Newest publication first

1. CVE-2012-5605 Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions

   Published 2013-01-04

   Low·CVSS 3.3

   A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the /var/lib/pulp/cache/grinder/ directory. This could lead to unauthorized data tampering wit...

2. CVE-2012-4574 Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file

   Published 2013-01-04

   Medium·CVSS 5.5

   A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the pulp.conf configuration file. This information disclosure could enable unauthorized access to sensitive sys...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.