CVE-2012-5509

2013-03-1221:00:00

redhat

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.

References

rhn.redhat.com/errata/RHSA-2013-0545.html

bugzilla.redhat.com/show_bug.cgi?id=875294