Red Hat Security AdvisoryRHSA-2012:1543
CloudForms System Engine 1.1 update
Released 2012-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- CloudForms System Engine for RHEL 6 Server candlepin-0.7.8.1-1.el6cf, candlepin-devel-0.7.8.1-1.el6cf, candlepin-selinux-0.7.8.1-1.el6cf +26
- CloudForms Tools for RHEL 5 Server gofer-0.66.1-2.el5, gofer-package-0.66.1-2.el5, gofer-watchdog-0.66.1-2.el5 +2
- CloudForms Tools for RHEL 6 Server gofer-0.66.1-2.el6cf, gofer-package-0.66.1-2.el6cf, gofer-watchdog-0.66.1-2.el6cf +2
Fixes 4 records
Priority LOW 27
proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspeci…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.01042 · Published 2013-01-04 · Fixed CWE-264
Priority LOW 25
A flaw was found in Pulp, as used in Red Hat CloudForms.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00362 · Published 2013-01-04 · Fixed in 0.7.8.1-1.el6cf, 0.66.1-2.el6cf +13 CWE-538
Priority LOW 17
Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.00638 · Published 2013-01-04 · Fixed CWE-255
Priority LOW 16
A flaw was found in Grinder, a component of Red Hat CloudForms.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2013-01-04 · Fixed in 0.7.8.1-1.el6cf, 0.66.1-2.el6cf +13 CWE-276
