CVE-2012-3538: Low severity red hat cloudforms vulnerability
Published Jan 4, 2013
·Updated
Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.
Affected Software
1 affected component
redhat Cloudforms<=1.0
Event History
Jan 4, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3538?
CVE-2012-3538 has a medium severity rating due to the exposure of administrative passwords.
2
How do I fix CVE-2012-3538?
To fix CVE-2012-3538, upgrade to Red Hat CloudForms version 1.1 or later.
3
Who is affected by CVE-2012-3538?
Users of Red Hat CloudForms versions prior to 1.1 are affected by CVE-2012-3538.
4
What are the risks of CVE-2012-3538?
The risks of CVE-2012-3538 include unauthorized access to administrative functionalities due to exposed passwords.
5
Is there a workaround for CVE-2012-3538?
A possible workaround for CVE-2012-3538 is to restrict access to the production.log file until an upgrade can be applied.