PT-2013-1810
CVE-2012-5603
·
تاريخ النشر
2013-01-04
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Red Hat CloudForms version 1.0
Description
The issue is related to the proxies controller.rb in Katello, where it does not properly check permissions. This allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the
consumer UUID of a system.Recommendations
For Red Hat CloudForms version 1.0, update to version 1.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾