CVE Vulnerabilities

CVE-2012-6120

Published: Apr 10, 2013 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V3
Ubuntu
LOW

Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.

Affected Software

Name Vendor Start Version End Version
Openstack_essex Redhat - (including) - (including)
Openstack_folsom Redhat - (including) - (including)
OpenStack Folsom for RHEL 6 RedHat puppet-0:2.6.18-1.el6ost *
Puppet Ubuntu hardy *
Puppet Ubuntu lucid *
Puppet Ubuntu upstream *

References