Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:10710
HistoryJan 15, 2019 - 8:51 a.m.

Information Disclosure

2019-01-1508:51:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

Pulp in Red Hat CloudForms is susceptible to information disclosure. The vulnerability exists because it leaks administrative passwords by logging into a world log file. This vulnerability can be deployed locally.

References

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N