CVE-2012-4574: Low severity red hat cloudforms vulnerability
During an audit of file permissions within CloudForms it was found that the /etc/pulp/pulp.conf is world readable. This file can contain the following sensitive information:
defaultpassword: default password for admin Highly recommend changing the defaultpassword with "pulp-admin user update" [server] ... defaultlogin: admin defaultpassword: CVkiDB/JKHhHp7+PlkfaqizG ... oauthkey: katello oauthsecret: zH9ZXu6JhDwlx9GjshbFaa0Q
This file should not be world readable, it should only be readable by the user/group that pulp runs as.
Other sources
Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4574?
CVE-2012-4574 has a medium severity rating due to file permission issues that expose sensitive information.
How do I fix CVE-2012-4574?
To fix CVE-2012-4574, change the permissions of the /etc/pulp/pulp.conf file to restrict access and prevent it from being world readable.
What sensitive information is exposed in CVE-2012-4574?
CVE-2012-4574 can expose sensitive credentials such as the default password for the admin account located in the /etc/pulp/pulp.conf file.
Which software versions are affected by CVE-2012-4574?
CVE-2012-4574 affects all versions of Red Hat CloudForms up to and including 1.0.
What are the potential risks associated with CVE-2012-4574?
The risks associated with CVE-2012-4574 include unauthorized access to sensitive configuration data, which could lead to system compromise.