Lucene search
HistoryMar 12, 2013 - 10:55 p.m.
CVE-2012-6117
aeolus
configuration server
red hat
cloudforms
cloud engine
cve-2012-6117
nvd
plaintext passwords
log file vulnerability
6.4 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.
Related
prion
prion
Design/Logic Flaw
2013-03-12 22:55:00
cvelist
cvelist
CVE-2012-6117
2022-10-03 16:15:27
veracode
veracode
Information Disclosure
2019-05-02 04:53:11
6.4 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2012-6117