PT-2013-1810 · Red Hat · Katello+1

Lukas Zapletal · Publicado 2013-01-04 · Atualizado 2017-08-29 · CVE-2012-5603

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms version 1.0

Description The issue is related to the proxies controller.rb in Katello, where it does not properly check permissions. This allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the consumer UUID of a system.

Recommendations For Red Hat CloudForms version 1.0, update to version 1.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-5603

Produtos afetados

Katello

Red Hat Cloudforms

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2012-5603 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=882129 · Nota
• http://secunia.com/advisories/51472 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-1543.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-0544.html · Aviso do Fabricante
• http://osvdb.org/88142 · Nota
• http://securityfocus.com/bid/56819 · Nota
• http://osvdb.org/88140 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80549 · Nota