GHSA-gqj9-6pwj-7952MediumCVSS 4.9
Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user...
🔗 CVE IDs covered (1)
📋 Description
Spacewalk-backend in Red Hat Network (RHN) Satellite and Proxy 5.4 includes cleartext user passwords in an error message when a system registration XML-RPC call fails, which allows remote administrators to obtain the password by reading (1) the server log and (2) an email.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2012-0059
- http://rhn.redhat.com/errata/RHSA-2012-0101.html
- http://rhn.redhat.com/errata/RHSA-2012-0102.html
- https://access.redhat.com/security/cve/CVE-2012-0059
- https://access.redhat.com/errata/RHSA-2012:0101
- https://access.redhat.com/errata/RHSA-2012:0102
- https://github.com/advisories/GHSA-gqj9-6pwj-7952