Lucene search
HistoryOct 22, 2012 - 11:55 p.m.
CVE-2012-2679
red hat network
rhn
rhncfg-client
cve-2012-2679
nvd
information security
5.4 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:rhncfg | redhat rhncfg | le | 5.10.27 |
Related
veracode
veracode
Sensitive Information Leakage
2019-01-15 08:59:02
nessus
nessus
RHEL 5 / 6 : rhncfg (RHSA-2012:1369)
2014-11-08 00:00:00
Fedora 17 : rhncfg-5.10.36-1.fc17 (2013-1229)
2013-02-04 00:00:00
Fedora 18 : rhncfg-5.10.36-1.fc18 (2013-1243)
2013-02-04 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: rhncfg-5.10.36-1.fc18
2013-02-03 13:49:34
[SECURITY] Fedora 16 Update: rhncfg-5.10.36-1.fc16
2013-02-03 13:48:42
[SECURITY] Fedora 17 Update: rhncfg-5.10.36-1.fc17
2013-02-03 13:44:11
openvas
openvas
Fedora Update for rhncfg FEDORA-2013-1229
2013-02-04 00:00:00
Fedora Update for rhncfg FEDORA-2013-1233
2013-02-04 00:00:00
Fedora Update for rhncfg FEDORA-2013-1229
2013-02-04 00:00:00
redhat
redhat
(RHSA-2012:1369) Moderate: rhncfg security, bug fix, and enhancement update
2012-10-15 00:00:00
prion
prion
Design/Logic Flaw
2012-10-22 23:55:00
5.4 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2012-2679