RHSA-2012:1543HighCVSS 5.5

Red Hat Security Advisory: CloudForms System Engine 1.1 update

Published
December 4, 2012
Last Modified
October 30, 2026

🔗 CVE IDs covered (4)

CVE-2012-3538 →CVE-2012-4574 →CVE-2012-5603 →CVE-2012-5605 →

📋 Description

CVE-2012-3538 — katello: pulp admin password logged in plaintext in world-readable katello/production.log CVE-2012-4574 — Pulp: Red Hat CloudForms: Pulp in Red Hat CloudForms: Information disclosure via world-readable configuration file CVE-2012-5603 — Katello: lack of authorization in proxies_controller.rb CVE-2012-5605 — Grinder: Red Hat CloudForms: Grinder in Red Hat CloudForms: Local users can modify cache files via world-writable permissions

🎯 Affected products58

  • CloudForms System Engine for RHEL 6 Server
  • CloudForms Tools for RHEL 5 Server
  • CloudForms Tools for RHEL 6 Server
  • candlepin-0:0.7.8.1-1.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • candlepin-0:0.7.8.1-1.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server
  • candlepin-devel-0:0.7.8.1-1.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • candlepin-selinux-0:0.7.8.1-1.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • candlepin-tomcat6-0:0.7.8.1-1.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • gofer-0:0.66.1-2.el5.noarch as a component of CloudForms Tools for RHEL 5 Server
  • gofer-0:0.66.1-2.el5.src as a component of CloudForms Tools for RHEL 5 Server
  • gofer-0:0.66.1-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • gofer-0:0.66.1-2.el6cf.noarch as a component of CloudForms Tools for RHEL 6 Server
  • gofer-0:0.66.1-2.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server
  • gofer-0:0.66.1-2.el6cf.src as a component of CloudForms Tools for RHEL 6 Server
  • gofer-package-0:0.66.1-2.el5.noarch as a component of CloudForms Tools for RHEL 5 Server
  • gofer-package-0:0.66.1-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • gofer-package-0:0.66.1-2.el6cf.noarch as a component of CloudForms Tools for RHEL 6 Server
  • gofer-watchdog-0:0.66.1-2.el5.noarch as a component of CloudForms Tools for RHEL 5 Server
  • gofer-watchdog-0:0.66.1-2.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • gofer-watchdog-0:0.66.1-2.el6cf.noarch as a component of CloudForms Tools for RHEL 6 Server
  • grinder-0:0.0.150-1.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • grinder-0:0.0.150-1.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server
  • katello-0:1.1.12-22.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • katello-0:1.1.12-22.el6cf.src as a component of CloudForms System Engine for RHEL 6 Server
  • katello-agent-0:1.1.2-1.el5.noarch as a component of CloudForms Tools for RHEL 5 Server
  • katello-agent-0:1.1.2-1.el5.src as a component of CloudForms Tools for RHEL 5 Server
  • katello-agent-0:1.1.2-1.el6cf.noarch as a component of CloudForms Tools for RHEL 6 Server
  • katello-agent-0:1.1.2-1.el6cf.src as a component of CloudForms Tools for RHEL 6 Server
  • katello-all-0:1.1.12-22.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • katello-api-docs-0:1.1.12-22.el6cf.noarch as a component of CloudForms System Engine for RHEL 6 Server
  • +28 more not shown

✅ Remediation

Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

🔗 References (234)