{"containers": {"cna": {"title": "Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissions", "metrics": [{"other": {"content": {"value": "Low", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache."}], "affected": [{"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "candlepin", "defaultStatus": "affected", "versions": [{"version": "0:0.7.8.1-1.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "gofer", "defaultStatus": "affected", "versions": [{"version": "0:0.66.1-2.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "grinder", "defaultStatus": "affected", "versions": [{"version": "0:0.0.150-1.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello", "defaultStatus": "affected", "versions": [{"version": "0:1.1.12-22.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-agent", "defaultStatus": "affected", "versions": [{"version": "0:1.1.2-1.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-certs-tools", "defaultStatus": "affected", "versions": [{"version": "0:1.1.8-1.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-cli", "defaultStatus": "affected", "versions": [{"version": "0:1.1.8-12.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-cli-tests", "defaultStatus": "affected", "versions": [{"version": "0:1.1.5-2.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-configure", "defaultStatus": "affected", "versions": [{"version": "0:1.1.9-12.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-selinux", "defaultStatus": "affected", "versions": [{"version": "0:1.1.1-2.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "pulp", "defaultStatus": "affected", "versions": [{"version": "0:1.1.14-1.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "quartz", "defaultStatus": "affected", "versions": [{"version": "0:2.1.5-4.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms for RHEL 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "rubygem-apipie-rails", "defaultStatus": "affected", "versions": [{"version": "0:0.0.11-3.el6cf", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms Tools for RHEL 5", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "gofer", "defaultStatus": "affected", "versions": [{"version": "0:0.66.1-2.el5", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}, {"vendor": "Red Hat", "product": "CloudForms Tools for RHEL 5", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "katello-agent", "defaultStatus": "affected", "versions": [{"version": "0:1.1.2-1.el5", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"]}], "references": [{"url": "http://osvdb.org/88141"}, {"url": "http://rhn.redhat.com/errata/RHSA-2012-1543.html"}, {"url": "http://secunia.com/advisories/51472"}, {"url": "http://www.securityfocus.com/bid/56819"}, {"url": "https://access.redhat.com/errata/RHSA-2012:1543", "name": "RHSA-2012:1543", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2012-5605", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=828447"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=882138"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80550"}], "datePublic": "2013-01-04T22:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-276", "description": "Incorrect Default Permissions", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-276: Incorrect Default Permissions", "timeline": [{"lang": "en", "time": "2026-04-02T15:03:00.115Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2013-01-04T22:00:00.000Z", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-30T18:52:20.667Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:14:16.072Z"}, "title": "CVE Program Container", "references": [{"name": "88141", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/88141"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=828447"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882138"}, {"name": "51472", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/51472"}, {"name": "cloudforms-grinder-insecure-permissions(80550)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80550"}, {"name": "RHSA-2012:1543", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2012-1543.html"}, {"name": "56819", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/56819"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-5605", "datePublished": "2013-01-04T22:00:00.000Z", "dateReserved": "2012-10-24T00:00:00.000Z", "dateUpdated": "2026-10-30T18:52:20.667Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.2"}

{}

{"affected": [{"affectedData": [{"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "candlepin", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:0.7.8.1-1.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "gofer", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:0.66.1-2.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "grinder", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:0.0.150-1.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.12-22.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-agent", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.2-1.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-certs-tools", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.8-1.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-cli", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.8-12.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-cli-tests", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.5-2.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-configure", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.9-12.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-selinux", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.1-2.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "pulp", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.14-1.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "quartz", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:2.1.5-4.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "rubygem-apipie-rails", "product": "CloudForms for RHEL 6", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:0.0.11-3.el6cf", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "gofer", "product": "CloudForms Tools for RHEL 5", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:0.66.1-2.el5", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:cloudforms_systemengine:1::el6", "cpe:/a:cloudforms_tools:1::el5", "cpe:/a:cloudforms_tools:1::el6"], "defaultStatus": "affected", "packageName": "katello-agent", "product": "CloudForms Tools for RHEL 5", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0:1.1.2-1.el5", "versionType": "rpm"}]}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:cloudforms:*:*:*:*:*:*:*:*", "matchCriteriaId": "72189D15-3318-45CD-B37E-FD53E4422052", "versionEndIncluding": "1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder's cache files due to incorrect world-writable permissions set on the `/var/lib/pulp/cache/grinder/` directory. This could lead to unauthorized data tampering within the application's cache."}, {"lang": "es", "value": "Grinder en Red Hat CloudForms anteriores a v1.1 usa permisos \"world-writable\" para /var/lib/pulp/cache/grinder/, lo que permite a usuarios locales modificar la cach\u00e9 de los ficheros grinder."}], "id": "CVE-2012-5605", "lastModified": "2026-10-30T19:17:26.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "secalert@redhat.com", "type": "Primary"}]}, "published": "2013-01-04T22:55:02.430", "references": [{"source": "secalert@redhat.com", "url": "http://osvdb.org/88141"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2012-1543.html"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/51472"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/56819"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2012:1543"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2012-5605"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=828447"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882138"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80550"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/88141"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2012-1543.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/51472"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/56819"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=828447"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882138"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80550"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-276"}], "source": "secalert@redhat.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{"acknowledgement": "This issue was discovered by James Labocki (Red Hat).", "affected_release": [{"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "candlepin-0:0.7.8.1-1.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "gofer-0:0.66.1-2.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "grinder-0:0.0.150-1.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-0:1.1.12-22.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-agent-0:1.1.2-1.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-certs-tools-0:1.1.8-1.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-cli-0:1.1.8-12.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-cli-tests-0:1.1.5-2.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-configure-0:1.1.9-12.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "katello-selinux-0:1.1.1-2.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "pulp-0:1.1.14-1.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "quartz-0:2.1.5-4.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el6", "package": "rubygem-apipie-rails-0:0.0.11-3.el6cf", "product_name": "CloudForms for RHEL 6", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el5", "package": "gofer-0:0.66.1-2.el5", "product_name": "CloudForms Tools for RHEL 5", "release_date": "2012-12-04T00:00:00Z"}, {"advisory": "RHSA-2012:1543", "cpe": "cpe:/a:cloudforms_tools:1::el5", "package": "katello-agent-0:1.1.2-1.el5", "product_name": "CloudForms Tools for RHEL 5", "release_date": "2012-12-04T00:00:00Z"}], "bugzilla": {"description": "grinder: /var/lib/pulp/cache/grinder directory is world-writeable", "id": "882138", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882138"}, "csaw": false, "cvss": {"cvss_base_score": "4.6", "cvss_scoring_vector": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "status": "verified"}, "details": ["Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files."], "name": "CVE-2012-5605", "package_state": [{"cpe": "cpe:/a:redhat:rhui:2", "fix_state": "Will not fix", "package_name": "grinder", "product_name": "RHUI for RHEL 6"}], "public_date": "2012-12-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2012-5605\nhttps://nvd.nist.gov/vuln/detail/CVE-2012-5605"], "statement": "Red Hat Update Infrastructure 2.1.3 is now in Production 2 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Update Infrastructure Life Cycle: https://access.redhat.com/support/policy/updates/rhui.", "threat_severity": "Moderate"}

{}