CVE-2012-0059Medium· 4.9▾ SunlitA flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.7%
A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-RPC call fails, causing cleartext user passwords to be included in error messages. Remote administrators can exploit this by reading server logs and emails, leading to the unauthorized disclosure of user passwords.
spacewalk-backend (all versions)spacewalk-backend (all versions)rhn-client-toolsrhnsdyum-rhn-pluginrhnsdyum-rhn-pluginRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-123036Medium· 5.5A flaw was found in ansible-core
CVE-2026-11873Medium· 6.5Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure
CVE-2026-120971Medium· 5.3Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses
CVE-2013-2056High· 7.5Red hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypass
CVE-2026-114348Medium· 5.3webpack-dev-server: webpack-dev-server: Information disclosure via malformed Host header (CVE-2026-114348)
CVE-2026-71463Low· 2.7Notification template Jinja AST whitelist only inspects static Getattr nodes