Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 14:35:17 +0000 fkie_cve-2012-5509 https://vulnerability.circl.lu/vuln/fkie_cve-2012-5509 <p>aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.</p> <p>aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2012-5509 GHSA-4m29-g7f4-9v6x https://vulnerability.circl.lu/vuln/ghsa-4m29-g7f4-9v6x <p>aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.</p> <p>aeolus-configserver-setup in the Aeolas Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for a temporary file in /tmp, which allows local users to read credentials by reading this file.</p> https://vulnerability.circl.lu/vuln/ghsa-4m29-g7f4-9v6x gsd-2012-5509 https://vulnerability.circl.lu/vuln/gsd-2012-5509 gsd-2012-5509 https://vulnerability.circl.lu/vuln/gsd-2012-5509 RHSA-2013:0545 — Red Hat Security Advisory: CloudForms Cloud Engine 1.1.2 update https://vulnerability.circl.lu/vuln/rhsa-2013:0545 <p>aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota</p> <p>aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota</p> https://vulnerability.circl.lu/vuln/rhsa-2013:0545