PT-2013-1496 · Suse · Suse Cloud+1

Published 2013-12-02 · Updated 2014-03-04 · CVE-2012-0434

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Crowbar, as used in SUSE Cloud 1.0

Description The server in Crowbar uses weak permissions for the production.log file. The impact and attack vectors of this issue are not specified.

Recommendations For Crowbar, as used in SUSE Cloud 1.0, consider changing the permissions of the production.log file to more secure settings to mitigate potential risks.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0434

Affected Products

Crowbar

Suse Cloud

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-0434 · Security Note
• https://support.novell.com/security/cve/CVE-2012-0434.html · Vendor Advisory
• https://suse.com/support/update/announcement/2013/suse-ru-20130020-1.html · Vendor Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=784857 · Note