PT-2013-1691

CVE-2012-4574

Published

2013-01-04

Updated

2017-08-29

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions prior to 1.1

Description The issue allows local users to read the administrative password due to world-readable permissions for the pulp.conf file.

Recommendations For versions prior to 1.1, change the permissions of the pulp.conf file to restrict read access to authorized users.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾