https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:35:16.697851+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2012-5509 fkie_cve-2012-5509 2026-09-28T14:35:16.786035+00:00

aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.

 https://vulnerability.circl.lu/vuln/ghsa-4m29-g7f4-9v6x GHSA-4m29-g7f4-9v6x 2026-09-28T14:35:16.786169+00:00

aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.

 https://vulnerability.circl.lu/vuln/gsd-2012-5509 gsd-2012-5509 2026-09-28T14:35:16.786208+00:00 gsd-2012-5509 https://vulnerability.circl.lu/vuln/rhsa-2013:0545 RHSA-2013:0545 — Red Hat Security Advisory: CloudForms Cloud Engine 1.1.2 update 2026-09-28T14:35:16.786233+00:00

aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota