2344 matches found
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
CVE-2012-5476
Within the RHOS Essex Preview 2012.2 of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value...
CVE-2012-5474
The file /etc/openstack-dashboard/localsettings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release python-django-horizon package before 2012.1.1 is world readable and exposes the secret key value...
Ansible Tower 3.5.x < 3.5.4 / 3.6.x < 3.6.2 Multiple Vulnerabilities
The version of Ansible Tower running on the remote web server is 3.5.x prior to 3.5.4 or 3.6.x prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities. - An information disclosure vulnerability exists in the Sumologic and Splunk callback plugins due to Ansible not respecting the...
CVE-2019-19341
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the SECRETKEY and the database backup. Any user with access to the Tower server, and knowledge of when a backup is run, could retrieve every...
PT-2019-15816 · Red Hat · Ansible Tower
Name of the Vulnerable Software and Affected Versions: Ansible Tower versions 3.6.x before 3.6.2 Description: A flaw was found in Ansible Tower where files in '/var/backup/tower' are left world-readable. These files include both the SECRET KEY and the database backup. Any user with access to the...
Unspecified vulnerability in Ansible Tower (CNVD-2019-46773)
Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage, and orchestrate computer systems.Ansible Tower is one of the task control applications that provides a user interface UI, dashboard, and REST API. Ansible Tower has an...
CVE-2014-0241
rubygem-hammercliforeman: File /etc/hammer/cli.modules.d/foreman.yml world readable...
CVE-2014-0241
rubygem-hammercliforeman: File /etc/hammer/cli.modules.d/foreman.yml world readable...
CVE-2013-0326
OpenStack nova base images permissions are world readable...
CVE-2013-0326
OpenStack nova base images permissions are world readable...
DEBIAN-CVE-2013-0326
OpenStack nova base images permissions are world readable...
Design/Logic Flaw
OpenStack nova base images permissions are world readable...
CVE-2013-0326
OpenStack nova base images permissions are world readable...
CVE-2013-0326
Technical details about CVE-2013-0326 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2013-0326
OpenStack nova base images permissions are world readable...
CVE-2013-0326
OpenStack nova base images permissions are world readable...
CVE-2019-4465
IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 163774...
Unspecified vulnerability in Python keyring
Python keyring is a library for supporting access to system key services from Python. A security vulnerability exists in Python keyring, which stems from the fact that the file created is globally readable and can be exploited by an attacker to obtain information...