CVE-2012-0949

Published: May 31, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.

Affected (3)

Products: Canonical: Ubuntu Linux

Canonical

1 product

Ubuntu Linux

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://osvdb.org/82020

Source: security@ubuntu.com

http://secunia.com/advisories/49230

Source: security@ubuntu.com

Vendor Advisory

http://www.securityfocus.com/bid/53605

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-1443-1

Source: security@ubuntu.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/75728

Source: security@ubuntu.com

http://osvdb.org/82020