Lucene search
PRIOn knowledge basePRION:CVE-2012-6117HistoryMar 12, 2013 - 10:55 p.m.
Design/Logic Flaw
2013-03-1222:55:00
PRIOn knowledge base
www.prio-n.com
3
Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloudforms_cloud_engine | le | 1.1 | |
| cloudforms_cloud_engine | eq | 1.0 |
Related
cve
cve
CVE-2012-6117
2022-10-03 16:15:27
veracode
veracode
Information Disclosure
2019-05-02 04:53:11
cvelist
cvelist
CVE-2012-6117
2022-10-03 16:15:27
nvd
nvd
CVE-2012-6117
2013-03-12 22:55:01