exploitDog

CVE-2012-2679

Опубликовано: 14 июн. 2012

Источник: redhat

CVSS2: 6.2

EPSS Низкий

Описание

Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2012-2679
https://nvd.nist.gov/vuln/detail/CVE-2012-2679

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=825275rhncfg: Insecure permissions used for /var/log/rhncfg-actions file

EPSS

Процентиль: 32%

0.00389

Низкий

6.2 Medium

CVSS2

Связанные уязвимости

CVE-2012-2679

nvd

почти 14 лет назад

Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.

GHSA-cpqq-ch36-7c84

github

около 4 лет назад

Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.

EPSS

Процентиль: 32%

0.00389

Низкий

6.2 Medium

CVSS2