CVE-2012-0059: Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.
Other sources
Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user passwords in an error message when a system registration XML-RPC call fails, which allows remote administrators to obtain the password by reading (1) the server log and (2) an email.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0059?
CVE-2012-0059 is classified as a moderate severity vulnerability due to the exposure of cleartext passwords.
How do I fix CVE-2012-0059?
To fix CVE-2012-0059, update your Red Hat Network Satellite or Proxy to the latest patched version provided by Red Hat.
What products are affected by CVE-2012-0059?
CVE-2012-0059 affects Red Hat Network Satellite and Proxy version 5.4.
Can CVE-2012-0059 lead to unauthorized access?
Yes, CVE-2012-0059 can lead to unauthorized access as it exposes user passwords in error messages.
What are the risks associated with CVE-2012-0059?
The risks associated with CVE-2012-0059 include potential account compromise and unauthorized administrative actions.