Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat CloudForms 密码泄露漏洞
Vulnerability Description
Red Hat CloudForms是美国红帽（Red Hat）公司的一套laaS（基础设施即服务）云服务解决方案。该解决方案可创建、管理私有和公共云，并具备对应用程序生命周期的管理能力。 Red Hat CloudForms 1.1之前版本中的Pulp中存在漏洞。该漏洞源于程序将管理密码录入在全局可读文件中。通过读取production.log文件，本地攻击者利用该漏洞读取pulp管理密码。
CVSS Information
N/A
Vulnerability Type
N/A