CVE-2012-4574

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-04 · updated 2026-06-16
Weakness: CWE-255

Description

Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.

Affected products

CloudForms: through 1.0

References

http://osvdb.org/88138
http://rhn.redhat.com/errata/RHSA-2012-1543.html
http://secunia.com/advisories/51472
http://www.securityfocus.com/bid/56819
https://bugzilla.redhat.com/show_bug.cgi?id=872487
https://exchange.xforce.ibmcloud.com/vulnerabilities/80548
http://osvdb.org/88138
http://rhn.redhat.com/errata/RHSA-2012-1543.html
http://secunia.com/advisories/51472
http://www.securityfocus.com/bid/56819
https://bugzilla.redhat.com/show_bug.cgi?id=872487
https://exchange.xforce.ibmcloud.com/vulnerabilities/80548

Get alerted when CVE-2012-4574 or the next vulnerability affects your stack