CVE-2012-4574Medium· 5.5▾ SunlitA flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure coul…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the pulp.conf configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.
candlepin (all versions)gofer (all versions)grinder (all versions)katello (all versions)katello-agent (all versions)katello-certs-tools (all versions)katello-cli (all versions)katello-cli-tests (all versions)katello-configure (all versions)katello-selinux (all versions)pulp (all versions)quartz (all versions)rubygem-apipie-rails (all versions)gofer (all versions)katello-agent (all versions)rhui_for_rhel_6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2012-5605Low· 3.3Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions
CVE-2026-112027Medium· 5.3cms: light0011 cms: Information disclosure via filename manipulation in Uploadify (CVE-2026-112027)
CVE-2026-109970Medium· 4.7A flaw was found in the clevis PKCS#11 pin
CVE-2026-106471High· 8.1A flaw was found in Candlepin
CVE-2026-15574High· 7.5A flaw was found in the vllm-orchestrator-gateway component
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail