PT-2013-1812 · Red Hat · Red Hat Cloudforms

James Labocki

·

Publicado

2013-01-04

·

Atualizado

2017-08-29

·

CVE-2012-5605

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions prior to 1.1
Description The issue concerns the Grinder in Red Hat CloudForms, where world-writable permissions are used for the /var/lib/pulp/cache/grinder/ directory. This allows local users to modify grinder cache files.
Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue. As a temporary workaround, consider restricting write access to the /var/lib/pulp/cache/grinder/ directory to prevent local users from modifying grinder cache files.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-5605

Produtos afetados

Red Hat Cloudforms