5.5
Medium
CVE-2012-4574 A flaw was found in Pulp, as used in Red Hat CloudForms
Description
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| CloudForms for RHEL 6 | Versions not published | |
| CloudForms Tools for RHEL 5 | Versions not published | |
| RHUI for RHEL 6 | Versions not published |
References
- osvdb.org osvdb.org
- rhn.redhat.com rhn.redhat.com
- secunia.com secunia.com
- www.securityfocus.com www.securityfocus.com
- RHBA-2013:0571 access.redhat.com
- RHSA-2012:1543 access.redhat.com
- access.redhat.com access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- exchange.xforce.ibmcloud.com exchange.xforce.ibmcloud.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated