Skip to content
CVE Tracker
Back

CVE-2012-4574

Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file

Medium5.5EPSS 0.36%
Published
Updated
Reserved
Assigned by
redhat

Description

A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.

Scores

CVSS scores of CVE-2012-4574, by who scored it
Scored byCVSSScoreVector
redhatCNA (assigner)3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
0.36% · top 70% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

Affected products

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.7.8.1-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.66.1-2.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.0.150-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.12-22.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.2-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.8-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.8-12.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.5-2.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.9-12.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.1-2.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.14-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:2.1.5-4.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.0.11-3.el6cf – < *

  • Red Hat · CloudForms Tools for RHEL 5

    • unaffected 0:0.66.1-2.el5 – < *

  • Red Hat · CloudForms Tools for RHEL 5

    • unaffected 0:1.1.2-1.el5 – < *

  • Red Hat · RHUI for RHEL 6

    All versions: unaffected

References (9)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .