Vulnerabilidades do Red Hat CloudForms for RHEL 6
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat CloudForms for RHEL 6: 2 registro(s), com versões afetadas e correções.
CVE-2012-5605
Baixa · 3.3
CWE-276 04/01/2013
Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache...
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache.
CVE-2012-4574
Média · 5.5
CWE-538 04/01/2013
Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.