CVE-2012-5603

Published: Jan 4, 2013Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated users to read consumer certificates or change arbitrary users' settings via unspecified vectors related to the "consumer UUID" of a system.

Affected (1)

Products: Redhat: Cloudforms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Cloudforms	Up to 1.0

Related CWEs

References (16)

http://osvdb.org/88140

Source: secalert@redhat.com

http://osvdb.org/88142

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1543.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0544.html

Source: secalert@redhat.com

http://secunia.com/advisories/51472

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/56819

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=882129

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80549

Source: secalert@redhat.com

http://osvdb.org/88140

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/88142

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1543.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0544.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51472

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/56819

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=882129

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80549

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.