{"id":"CVE-2012-4574","aliases":[],"cve":{"records":[{"id":"CVE-2012-4574","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2012-08-21T00:00:00.000Z","published":"2013-01-04T22:00:00.000Z","modified":"2026-10-30T18:03:35.367Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-10-30T18:03:35.367Z"},{"name":"CVE","role":"ADP","organizationId":"af854a3a-2127-422b-91ae-364da2661108","modified":"2024-08-06T20:42:54.823Z"}],"references":[{"url":"http://osvdb.org/88138","tags":[],"source":"redhat"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1543.html","tags":[],"source":"redhat"},{"url":"http://secunia.com/advisories/51472","tags":[],"source":"redhat"},{"url":"http://www.securityfocus.com/bid/56819","tags":[],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHBA-2013:0571","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2012:1543","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2012-4574","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872487","tags":[],"source":"redhat"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80548","tags":[],"source":"redhat"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80548","tags":["vdb-entry","x_refsource_XF","x_transferred"],"source":"CVE"},{"url":"http://osvdb.org/88138","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"source":"CVE"},{"url":"http://secunia.com/advisories/51472","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"source":"CVE"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872487","tags":["x_refsource_MISC","x_transferred"],"source":"CVE"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1543.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"http://www.securityfocus.com/bid/56819","tags":["vdb-entry","x_refsource_BID","x_transferred"],"source":"CVE"}],"weaknesses":[{"id":"CWE-538","description":"Insertion of Sensitive Information into Externally-Accessible File or Directory","source":"redhat"}],"applicability":[],"prioritization":[]},"title":"Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration file","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. This information disclosure could enable unauthorized access to sensitive system credentials.","score":5.5,"severity":"medium","published":"2013-01-04T22:00:00.000Z","modified":"2026-10-30T18:03:35.367Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:0.7.8.1-1.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:0.66.1-2.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:0.0.150-1.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.12-22.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.2-1.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.8-1.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.8-12.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.5-2.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.9-12.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.1-2.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:1.1.14-1.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:2.1.5-4.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms for RHEL 6","platforms":[],"versions":[{"version":"0:0.0.11-3.el6cf","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms Tools for RHEL 5","platforms":[],"versions":[{"version":"0:0.66.1-2.el5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"CloudForms Tools for RHEL 5","platforms":[],"versions":[{"version":"0:1.1.2-1.el5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:cloudforms_systemengine:1::el6","cpe:/a:cloudforms_tools:1::el5","cpe:/a:cloudforms_tools:1::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"},{"vendor":"Red Hat","name":"RHUI for RHEL 6","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:rhui:2::el6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"}],"remediation":[],"references":["http://osvdb.org/88138","http://rhn.redhat.com/errata/RHSA-2012-1543.html","http://secunia.com/advisories/51472","http://www.securityfocus.com/bid/56819","https://access.redhat.com/errata/RHBA-2013:0571","https://access.redhat.com/errata/RHSA-2012:1543","https://access.redhat.com/security/cve/CVE-2012-4574","https://bugzilla.redhat.com/show_bug.cgi?id=872487","https://exchange.xforce.ibmcloud.com/vulnerabilities/80548"],"sources":[{"name":"CVE","id":"CVE-2012-4574","modified":"2026-10-30T18:03:35.367Z","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":5.5}],"sourceAffected":[],"observedAt":"2026-10-30T19:11:57.914Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T11:25:31.829Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"A flaw in Pulp, as used in Red Hat CloudForms, allows a local user to read the administrative password due to world-readable permissions on the `pulp.conf` configuration file. The vulnerability could enable unauthorized access to sensitive system credentials. The affected product is Red Hat CloudForms for RHEL 6, but specific affected versions are not clearly stated.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T10:31:13.985Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2012-4574"}]}}