Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pulp in Red Hat CloudForms before 1.1 uses world-readable permissions for pulp.conf, which allows local users to read the administrative password by reading this file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat CloudForms 管理员密码泄露漏洞
Vulnerability Description
Red Hat CloudForms是美国红帽（Red Hat）公司的一套laaS（基础设施即服务）云服务解决方案。该解决方案可创建、管理私有和公共云，并具备对应用程序生命周期的管理能力。 Red Hat CloudForms 1.1之前版本中的Pulp中存在漏洞，该漏洞源于pulp.conf使用全局可读权限。通过读取此文件，本地攻击者利用该漏洞读取管理密码。
CVSS Information
N/A
Vulnerability Type
N/A