CVE-2012-5605Low· 3.3▾ SunlitA flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the /var/lib/pulp/cache/grinder/ directory. This could lead to unauthorized data tampering within the application's cache.
candlepin (all versions)gofer (all versions)grinder (all versions)katello (all versions)katello-agent (all versions)katello-certs-tools (all versions)katello-cli (all versions)katello-cli-tests (all versions)katello-configure (all versions)katello-selinux (all versions)pulp (all versions)quartz (all versions)rubygem-apipie-rails (all versions)gofer (all versions)katello-agent (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2012-4574Medium· 5.5Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file
CVE-2025-58713Medium· 6.4Rhpam: privilege escalation via excessive /etc/passwd permissions
CVE-2012-3427Medium· 5.5Jboss-eap: aws-ec2: jboss eap and aws ec2: information disclosure via incorrect directory permissions
CVE-2013-0266Medium· 5.5Puppetlabs-cinder: packstack: openstack: puppetlabs-cinder: information disclosure of openstack administrative passwords due to world-readable configuration files.
CVE-2026-106471High· 8.1A flaw was found in Candlepin
CVE-2025-57848Medium· 6.4A container privilege escalation flaw was found in certain Container-native Virtualization images