CVE-2012-3538

Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log...

CVE-2012-4574

Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file...

CVE-2012-3538

CVE-2012-3538 affects Red Hat CloudForms (System Engine) 1.1 and is caused by Pulp logging administrative passwords to a world-readable log file (production.log). This local, file-based disclosure allows a user with access to the log to read administrative credentials and potentially take control...

CVE-2012-4574

CVE-2012-4574 affects Red Hat CloudForms with the Pulp component. The issue arises because the Pulp configuration file, pulp.conf, was installed with world-readable permissions, allowing local users to read the administrative password. The RHSA-2012:1543 update for CloudForms System Engine 1.1 fi...

PT-2013-1608

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions prior to 1.1 Description The issue allows local users to read administrative passwords by accessing a world-readable log file. This occurs because Pulp logs administrative passwords in the production.log file, which...

CVE-2012-3538: Undefined Security Weakness

Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log...

CVE-2012-4574: Undefined Security Weakness

Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file...

katello: pulp admin password logged in plaintext in world-readable katello/production.log

Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log...

Important: Red Hat Security Advisory: CloudForms System Engine 1.1 update

Updated CloudForms System Engine packages that fix multiple security issues, several bugs, and add enhancements are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...

Site By Electric Pulp Web Site SQL Injection

Site By Electric Pulp Web Site SQL injection Exploit Title: Site By Electric Pulp Web Site SQL injection Vulnerability Date: 08/01/2012 - 16:37 Author: KatiLhacker Software Website: www.electricpulp.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: PHP $ Dorks: "inurl:"index.php?newsid=" $ De...