CVE-2012-4574

medium

Description

A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/80548

https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-4500

https://bugzilla.redhat.com/show_bug.cgi?id=872487

https://access.redhat.com/security/cve/CVE-2012-4574

https://access.redhat.com/errata/RHSA-2012:1543

https://access.redhat.com/errata/RHBA-2013:0571

http://www.securityfocus.com/bid/56819

http://secunia.com/advisories/51472

http://rhn.redhat.com/errata/RHSA-2012-1543.html

http://osvdb.org/88138

Details

Source: Mitre, NVD

Published: 2013-01-04

Updated: 2026-10-30

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00361