VDB
CVE-2012-2679
CVE-2012-2679
PUBLISHED
Reported by redhat · Published October 22, 2012
Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive information about the rhncfg-client actions by reading the file.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | * |
Timeline
- Oct 22, 2012 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
References
- x_refsource_CONFIRM
- 50978 third-party-advisoryx_refsource_SECUNIA
- 55934 vdb-entryx_refsource_BID
- 1027661 vdb-entryx_refsource_SECTRACK
- netconfclient-rhncfgactions-info-disclosure(79260) vdb-entryx_refsource_XF
- RHSA-2012:1369 vendor-advisoryx_refsource_REDHAT