VULNERABILITY INTELLIGENCE

CVE-2012-6117

CVSS score2.1 LOW
EPSS probability0.47%
CISA KEVNot currently listed
Published2013-03-12
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.

Primary references