Lucene search
RedhatCVE-2012-6118HistoryMar 12, 2013 - 10:55 p.m.
CVE-2012-6118
2013-03-1222:55:01
CWE-264
redhat
web.nvd.nist.gov
20
aeolus
conductor
administer
tab
quota
bypass
cve-2012-6118
nvd
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
50.5%
The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting.
Affected configurations
Node
redhataeolus_conductorMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | aeolus_conductor | - | cpe:2.3:a:redhat:aeolus_conductor:-:*:*:*:*:*:*:* |
Related
veracode
veracode
Authorization Bypass
2019-05-02 04:53:11
cvelist
cvelist
CVE-2012-6118
2013-03-12 21:00:00
nvd
nvd
CVE-2012-6118
2013-03-12 22:55:01
prion
prion
Design/Logic Flaw
2013-03-12 22:55:00
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
50.5%
Related for CVE-2012-6118