https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T10:44:58.093270+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2012-6117 fkie_cve-2012-6117 2026-09-28T10:44:58.102873+00:00

Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.

 https://vulnerability.circl.lu/vuln/ghsa-58x3-gjpx-27qx GHSA-58x3-gjpx-27qx 2026-09-28T10:44:58.102987+00:00

Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.

 https://vulnerability.circl.lu/vuln/gsd-2012-6117 gsd-2012-6117 2026-09-28T10:44:58.103022+00:00 gsd-2012-6117 https://vulnerability.circl.lu/vuln/rhsa-2013:0545 RHSA-2013:0545 — Red Hat Security Advisory: CloudForms Cloud Engine 1.1.2 update 2026-09-28T10:44:58.103045+00:00

aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota