Описание
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the pulp.conf configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.0 (включая)
cpe:2.3:a:redhat:cloudforms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.00362
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-538
CWE-255
Связанные уязвимости
CVSS3: 5.5
redhat
почти 14 лет назад
Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.
CVSS3: 5.5
github
больше 4 лет назад
Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.
EPSS
Процентиль: 30%
0.00362
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-538
CWE-255