Lucene search
HistoryJan 04, 2013 - 10:55 p.m.
CVE-2012-3538
3.3 Low
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.4%
Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.
Affected configurations
Node
redhatcloudformsRange≤1.0
Related
prion
prion
Code injection
2013-01-04 22:55:00
cve
cve
CVE-2012-3538
2013-01-04 22:55:01
veracode
veracode
Information Disclosure
2019-01-15 08:51:08
Privilege Escalation
2019-05-02 04:41:52
Information Disclosure
2019-05-02 04:41:51
cvelist
cvelist
CVE-2012-3538
2013-01-04 22:00:00
nessus
nessus
redhat
redhat
(RHSA-2012:1543) Important: CloudForms System Engine 1.1 update
2012-12-04 00:00:00
3.3 Low
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.4%
Related for NVD:CVE-2012-3538