CVE-2012-5605
low
CVSS v3
—
CVSS v2
2.1
VIR risk
2.1
Description
Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/51472
Vendor advisory: secalert@redhat.com — http://rhn.redhat.com/errata/RHSA-2012-1543.html
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| redhat | cloudforms | {"endIncluding":"1.0"} | |
References
- http://osvdb.org/88141
- http://rhn.redhat.com/errata/RHSA-2012-1543.html
- http://secunia.com/advisories/51472
- http://www.securityfocus.com/bid/56819
- https://bugzilla.redhat.com/show_bug.cgi?id=828447
- https://bugzilla.redhat.com/show_bug.cgi?id=882138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80550
- http://osvdb.org/88141
- http://rhn.redhat.com/errata/RHSA-2012-1543.html
- http://secunia.com/advisories/51472
- http://www.securityfocus.com/bid/56819
- https://bugzilla.redhat.com/show_bug.cgi?id=828447
- https://bugzilla.redhat.com/show_bug.cgi?id=882138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80550
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.