PT-2013-1496

CVE-2012-0434

·

Published

2013-12-02

·

Updated

2014-03-04

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Crowbar, as used in SUSE Cloud 1.0
Description The server in Crowbar uses weak permissions for the production.log file. The impact and attack vectors of this issue are not specified.
Recommendations For Crowbar, as used in SUSE Cloud 1.0, consider changing the permissions of the production.log file to more secure settings to mitigate potential risks.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2012-0434
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com