Skip to content
CVE Tracker
Back

CVE-2012-5605

Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions

Low3.3EPSS 0.32%
Published
Updated
Reserved
Assigned by
redhat

Description

A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache.

Scores

CVSS scores of CVE-2012-5605, by who scored it
Scored byCVSSScoreVector
redhatCNA (assigner)3.1Low3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
NVDNVD · Modified3.1Low3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS (exploitation in 30 days)
0.32% · top 75% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.3.

Weakness

Affected products

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.7.8.1-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.66.1-2.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.0.150-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.12-22.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.2-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.8-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.8-12.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.5-2.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.9-12.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.1-2.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:1.1.14-1.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:2.1.5-4.el6cf – < *

  • Red Hat · CloudForms for RHEL 6

    • unaffected 0:0.0.11-3.el6cf – < *

  • Red Hat · CloudForms Tools for RHEL 5

    • unaffected 0:0.66.1-2.el5 – < *

  • Red Hat · CloudForms Tools for RHEL 5

    • unaffected 0:1.1.2-1.el5 – < *

References (9)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .