Red Hat CloudForms Tools for RHEL 5 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat CloudForms Tools for RHEL 5: 2 record(s), with affected versions and fixes.
CVE-2012-5605
Low · 3.3
CWE-276 Jan 4, 2013
Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache...
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache.
CVE-2012-4574
Medium · 5.5
CWE-538 Jan 4, 2013
Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.