PT-2012-4767 · Red Hat · Katello

Lzap · Published 2012-08-25 · Updated 2024-02-13 · CVE-2012-3503

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Katello versions 1.0 and earlier

Description The installation script does not properly generate the Application.config.secret token value, resulting in each default installation having the same secret token. This allows remote attackers to authenticate to the CloudForms System Engine web interface as an arbitrary user by creating a cookie using the default secret token.

Recommendations For Katello versions 1.0 and earlier, consider regenerating the Application.config.secret token value to a unique and secure token to prevent unauthorized access. As a temporary workaround, restrict access to the CloudForms System Engine web interface until a secure secret token can be generated.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2012-3503

GHSA-5XV2-Q475-RWRH

Affected Products

Katello

References · 13

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2012-3503.yml · Exploit
• 🔥 https://github.com/Katello/katello/commit/7c256fef9d75029d0ffff58ff1dcda915056d3a3 · Exploit
• http://rhn.redhat.com/errata/RHSA-2012-1187.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5xv2-q475-rwrh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3503 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-1186.html · Vendor Advisory
• https://github.com/Katello/katello · Note
• https://github.com/Katello/katello/pull/499 · Note
• http://secunia.com/advisories/50344 · Note
• https://github.com/advisories/GHSA-5xv2-q475-rwrh · Note
• https://web.archive.org/web/20200229120740/http://securityfocus.com/bid/55140 · Note
• http://securityfocus.com/bid/55140 · Note
• https://web.archive.org/web/20140806122239/http://secunia.com/advisories/50344 · Note