Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:44:58 +0000 fkie_cve-2012-6117 https://vulnerability.circl.lu/vuln/fkie_cve-2012-6117 <p>Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.</p> <p>Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2012-6117 GHSA-58x3-gjpx-27qx https://vulnerability.circl.lu/vuln/ghsa-58x3-gjpx-27qx <p>Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.</p> <p>Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to read plaintext passwords by reading the log file.</p> https://vulnerability.circl.lu/vuln/ghsa-58x3-gjpx-27qx gsd-2012-6117 https://vulnerability.circl.lu/vuln/gsd-2012-6117 gsd-2012-6117 https://vulnerability.circl.lu/vuln/gsd-2012-6117 RHSA-2013:0545 — Red Hat Security Advisory: CloudForms Cloud Engine 1.1.2 update https://vulnerability.circl.lu/vuln/rhsa-2013:0545 <p>aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota</p> <p>aeolus-configserver: aeolus-configserver-setup /tmp file conductor credentials leak Configserver: Passwords from application blueprint stored plaintext in configserver.log Conductor: Unprivileged user can change their own Maximum Running Instances quota</p> https://vulnerability.circl.lu/vuln/rhsa-2013:0545