CVE-2012-5509

Related Files

Red Hat Security Advisory 2013-0545-01

Posted Feb 21, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0545-01 - Red Hat CloudForms is an on-premise hybrid cloud Infrastructure-as-a-Service product that lets you create and manage private and public clouds. It provides self-service computing resources to users in a managed, governed, and secure way. CloudForms Cloud Engine is a management application for cloud resources. It was found that the Aeolus Configuration Server stored passwords in plain text in the world-readable "/var/log/aeolus-configserver/configserver.log" file. A local attacker could use this flaw to obtain the administrative passwords for other services.

tags | advisory, local

systems | linux, redhat

advisories | CVE-2012-5509, CVE-2012-6117, CVE-2012-6118

SHA-256 | 289d775b58d68820148aa9883ca53a46eccbfdd48348721c182bb2dfa5c860cc

Download | Favorite | View