Read the docs
TI-2012-05080 Aliases CVE-2012-6116GHSA-h3g7-crqm-323f

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello…

Priority LOW 11CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.

Why it matters now

EPSS 0.00229 13th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:katello:katello:-:*:*:*:*:*:*:*not specified by NVDVulnerableKatello
cpe:2.3:a:katello:katello-configure:*:*:*:*:*:*:*:*up to 1.3.2_pulpv2VulnerableKatello
  • cpe:2.3:a:katello:katello:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Katello
  • cpe:2.3:a:katello:katello-configure:*:*:*:*:*:*:*:* Versions up to 1.3.2_pulpv2 Vulnerable ·Katello

Remediation

Red Hat 2 advisories

  • RHSA-2013:0686 Released 2013-03-26 · Red Hat rating Moderate
    Subscription Asset Manager 1.2.1 update
    • Red Hat Subscription Asset Manager for RHEL 6 Server candlepin-0.7.24-1.el6_3, candlepin-devel-0.7.24-1.el6_3, candlepin-selinux-0.7.24-1.el6_3 +23
  • RHSA-2013:0547 Released 2013-02-21 · Red Hat rating Moderate
    CloudForms System Engine 1.1.2 update
    • CloudForms System Engine for RHEL 6 Server candlepin-0.7.19-3.el6cf, candlepin-devel-0.7.19-3.el6cf, candlepin-selinux-0.7.19-3.el6cf +11

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms System Engine for RHEL 6 ServerFixed RHSA-2013:0547
Red Hat Subscription Asset Manager for RHEL 6 ServerFixed RHSA-2013:0686

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6116
  2. 2026-10-03 Alias added: GHSA-h3g7-crqm-323f

References

Advisory 2

Other 2

  • TI-2016-02572 Multiple SQL injection vulnerabilities in the scoped_search function in… CVSS 3.0HIGH 8.8
  • TI-2014-03027 Katello allows remote attackers to cause a denial of service (memory consumption) via the… CVSS 2.0MEDIUM 5.0
  • TI-2013-03673 Katello allows remote authenticated users to call the "system remove_deletion" CLI… CVSS 3.0MEDIUM 4.3
  • TI-2012-04677 script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences